C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 21/22

2022-05-27 15:11 - Kgwadi Matenche

Security News:
- Researchers to release exploit for new VMware auth bypass, patch now [Ionut Ilascu, Bleeping Computer]
- Multiple Governments Buying Android Zero-Days for Spying: Google [Dark Reading]
- Threat actors target the infoSec community with fake PoC exploits [Pierluigi Paganini, Security Affairs]
- Justice dept channels funds to hack-proof IT systems [Sibahle Malinga, ITWeb]
Breaches & Leaks:
- Ransomware attack on nonprofit causes data breach of 500,000 students, teachers in Chicago [Jonathan Greig, The Record]
Vulnerabilities & Patches:
- Patch now: Zoom chat messages can infect PCs, Macs, phones with malware [Jessica Lyons Hardcastle, The Register]
- Chrome 102 Patches 32 Vulnerabilities [Eduard Kovacs, SecurityWeek]
- Mozilla Foundation Security Advisory 2022-19 [Mozilla]
Others:
- Attempted Ransomware Attack Grounds SpiceJet Flights [Mihir Bagwe, BankInfoSecurity]
- Vishing cases reach all time high [Help Net Security]
- Google shut down caching servers at two Russian ISPs [Bill Toulas, Bleeping Computer]
- Broadcom Snaps Up VMware in $61B Deal [Dark Reading]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2