C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 12/21

2021-03-26 13:33 - Kgwadi Matenche

Vulnerabilities & Patches:
- OpenSSL 1.1.1k Patches Two High-Severity Vulnerabilities [Eduard Kovacs, SecurityWeek]
- RCE flaw in Apache OFBiz could allow to take over the ERP system [Pierluigi Paganini, Security Affairs]
- New Zoom Screen-Sharing Bug Lets Other Users Access Restricted Apps [Ravie Lakshmanan, The Hacker News]
- Critical F5 BIG-IP Bug Under Active Attacks After PoC Exploit Posted Online [Ravie Lakshmanan, The Hacker News]
- Cisco addresses critical bug in Windows, macOS Jabber clients [Sergiu Gatlan, Bleeping Computer]
Breaches:
- Ransomware gang leaks data stolen from Colorado, Miami universities [Lawrence Abrams, Bleeping Computer]
- Ministry of Defence academy hit by state-sponsored hackers [Pierluigi Paganini, Security Affairs]
- Computer giant Acer hit by $50 million ransomware attack [Lawrence Abrams, Bleeping Computer]
News:
- Standard Bank blocks spoofed Web sites, millions of e-mails [Sibahle Malinga, ITWeb]
- Microsoft: Ongoing, Expanding Campaign Bypassing Phishing Protections [Ionut Arghire, SecurityWeek]
- PPS works to restore full functionality after cyber attack [Simnikiwe Mzekandaba, ITWeb]
- Russian Pleads Guilty in Tesla Hacking Scheme [Scott Ferguson, BankInfoSecurity]
Others:
- New Windows 10 emergency updates fix remaining printing issues [Lawrence Abrams, Bleeping Computer]
- Can We Stop Pretending SMS Is Secure Now? [Brian Krebs, Krebs on Security]
- Microsoft Defender adds automatic Exchange ProxyLogon mitigation [Sergiu Gatlan, Bleeping Computer]
- Purple Fox Rootkit Now Propagates as a Worm [Amit Serper, Guardicore]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2