C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 24/22

2022-06-17 13:29 - Kgwadi Matenche

Security News:
- Shoprite suffers suspected data compromise [ITWeb]
- Facebook Messenger Scam Duped Millions [Nate Nelson, Threatpost]
Malware:
- MaliBot’ Android Malware Steals Financial, Personal Information [Ionut Arghire, SecurityWeek]
- Panchan Golang P2P botnet targeting Linux servers in cryptomining campaign [Pierluigi Paganini, Security Affairs]
- Linux Malware Deemed ‘Nearly Impossible’ to Detect [Elizabeth Montalbano, Threatpost]
Breaches & Leaks:
- Elasticsearch Database Mess Up Exposed Login, PII Data of 30,000 Students [Deeba Ahmed, HackRead]
- BlackCat Attacks University of Pisa, Demands $4.5M Ransom [Mihir Bagwe, Bank Info Security]
- Kaiser Permanente data breach exposes health data of 69K people [Sergiu Gatlan, Bleeping Computer]
Vulnerabilities & Patches:
- 730K WordPress sites force-updated to patch critical plugin bug [Sergiu Gatlan, Bleeping Computer]
- Microsoft fixes Follina and 55 other CVEs [Zeljka Zorz, Help Net Security]
- Cisco Secure Email bug can let attackers bypass authentication [Sergiu Gatlan, Bleeping Computer]
- Google Chrome update fixes four severe security flaws [Myles Illidge, MyBroadband]
- Critical Code Execution Vulnerability Patched in Splunk Enterprise [Ionut Arghire, SecurityWeek]
Others:
- Cybercriminals Capitalizing on Resurgence in Travel [Nathan Eddy, Dark Reading]
- Ransomware Group Debuts Searchable Victim Data [Brian Krebs, Krebs on Security]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2