C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 13/22

2022-04-01 13:19 - Sicelo Ncekana

Hacking
- Hackers use modified MFA tool against Indian govt employees [Bill Toulas, BleepingComputer]
- $620 million in crypto stolen from Axie Infinity’s Ronin bridge [Lawrence Abrams, BleepingComputer]
- New Report on Okta Hack Reveals the Entire Episode LAPSUS$ Attack [Ravie Lakshmanan, The hacker news]
- Globant confirms hack after Lapsus$ leaks 70GB of stolen data [Ionut Ilascu, BleepingComputer]

Vulnerabilities
- Critical SonicOS Vulnerability Affects SonicWall Firewall Appliances [Ravie Lakshmanan, The hacker news]
- Apple releases emergency patch fixing zero-days across iOS and macOS [Ravie Lakshmanan, The hacker news]
- Apple releases emergency patch fixing zero-days across iOS and macOS [Connor Jones, ITPro]
- Spring patches leaked Spring4Shell zero-day RCE vulnerability [Lawrence Abrams, BleepingComputer]
- Zyxel Releases Patches for Critical Bug Affecting Business Firewall and VPN Devices [Ravie Lakshmanan, The hacker news]
- Linux Privilege Escalation: DirtyPipe [Raj Chandel, Hacking articles]
Other
- New Python-based Ransomware Targeting JupyterLab Web Notebooks [Ravie Lakshmanan, The hacker news]
- New Malware Loader ‘Verblecon’ Infects Hacked PCs with Cryptocurrency Miners [Ravie Lakshmanan, The hacker news]
- Google Chrome Bug Actively Exploited as Zero-Day [Tara Seals, threatpost]
- Cyberattackers Target UPS Backup Power Devices in Mission-Critical Environments [Tara Seals, threatpost]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B