C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 15/21

2021-04-16 09:25 - Renier van Heerden

Facebook News
- 14.3 million South Africa Facebook users hit by data leak – check if you are affected [Hanno Labuschagne, MyBroadband]
- Singapore’s most expensive Facebook link [Kirsten Han, Rest of the World]
Patch News
- Microsoft Patch Tuesday, April 2021 Edition [Brian Krebs, Krebs on Security]
- April Microsoft Security Patches Released, Bringing More Critical Exchange Server Fixes [Kurt Mackie, Redmondmag]
- Git.PHP.net Not Compromised in Supply Chain Attack, but User Database Leak Possible [Nikita Popov, Inside Dev]
- Cyber criminals are installing cryptojacking malware on unpatched Microsoft Exchange servers [Danny Palmer, ZDNet]
- SAP fixes critical bugs in Business Client, Commerce, and NetWeaver [Ionut Ilascu, Bleeping Computer]
- Exploit for Second Unpatched Chromium Flaw Made Public Just After First Is Patched [Eduard Kovacs, Security Week]
Hacks
- Iran calls Natanz atomic site blackout nuclear terrorism [Jon Gambrell, AP News]
- Microsoft Teams And Zoom Hacked In $1 Million Competition [Thomas Brewster, Forbes]
- Personal data of 1.3m Clubhouse users leaked online after LinkedIn and Facebook also suffered data breaches [Katie Canales, Business Insider]
- Isreal may have destroyed Iranian centrifuges simply by cutting power [Kim Zetter, The Intercept]
- NAME:WRECK vulnerabilities impact millions of smart and industrial devices [Catalin Cimpanu, The Record]
- US government confirms Russian SVR behind the SolarWinds hack [Ionut Ilascu, Bleeping Computer]
Other
- Sudden New Warning Will Surprise Millions Of WhatsApp Users [Zak Doffman, Forbes]
- NSA: Top 5 vulnerabilities actively abused by Russian govt hackers [Lawrence Abrams, Bleeping Computer]
- University of Hertfordshire pulls the plug on, well, everything after cyber attack [Richard Speed, The Register]
- Ransomware Attack Creates Cheese Shortages in Netherlands [Becky Bracken, Threat Post]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2