C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 17/21

2021-04-30 11:14 - Kgwadi Matenche

Malware:
- New stealthy Linux malware used to backdoor systems for years [Sergiu Gatlan, Bleeping Computer]
- Emotet malware self-destructs after cops deliver time-bomb DLL to infected Windows PCs [Gareth Corfield, The Register]
- FluBot Malware’s Rapid Spread May Soon Hit US Phones [Kelly Sheridan, Dark Reading]
Breaches:
- DigitalOcean data breach exposes customer billing information [Lawrence Abrams, Bleeping Computer]
- Hackers threaten to leak stolen Apple blueprints if $50 million ransom isn’t paid [Ravie Lakshmanan, The Hacker News]
- DC Police confirms cyberattack after ransomware gang leaks data [Lawrence Abrams, Bleeping Computer]
Vulnerabilities & Patches:
- F5 BIG-IP Found Vulnerable to Kerberos KDC Spoofing Vulnerability [Ravie Lakshmanan, The Hacker News]
- Several High-Severity Vulnerabilities Expose Cisco Firewalls to Remote Attacks [Ionut Arghire, Security Week]
- Threat actors are exploiting two flaws in the popular file-sharing server FileZen to steal sensitive data from businesses and government organizations [Pierluigi Paganini, Security Affairs]
- Apple patches macOS zero-day exploited by malware for months [Zeljka Zorz, Help Net Security]
News:
- Openserve security flaw exposes broadband subscriber information [Jan Vermeulen, MyBroadband]
- Cybercriminals Widely Abusing Excel 4.0 Macro to Distribute Malware [Ravie Lakshmanan, The Hacker News]
- Experian API Exposed Credit Scores of Most Americans [Brian Krebs, Krebs on Security]
- Cloud misconfiguration, a major risk for cloud security [Pierluigi Paganini, Security Affairs]
- Defending against cryptojacking with Microsoft Defender for Endpoint and Intel TDT [Karthik Selvaraj, Microsoft]
Others:
- TransUnion tech helps protect clients affected by data leak [Sibahle Malinga, ITWeb]
- Cable-chewing beavers take out town’s Internet in “uniquely Canadian” outage [Jon Brodkin, Ars Technica]
- National Supply Chain Integrity Month [Cybersecurity and Infrastructure Security Agency (CISA)]
- University Suspends Project After Researchers Submitted Vulnerable Linux Patches [Robert Lemos, Dark Reading]
- Sharing Documents via SharePoint Is Always a Good Idea: Not always… [Kian Mahdavi, Cofense]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2