C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 25/18

- Roderick Mooi

  1. Liberty systems breached in hack [BusinessTech]
    - “Dear Valued Customer, Liberty regrets to inform you that it has been subjected to unauthorised access to its IT infrastructure, by an external party who requested compensation for it. Since becoming aware – we have taken immediate steps to secure our computer systems and are investigating the incident. We are giving this matter the highest priority and will keep you informed as appropriate.” – SMS 16 June
    - “Liberty hackers” warn they have client and financial data [MyBroadband]
    - Data breach under control and under investigation, says Liberty CEO [Fin24]
    - Information Regulator wants answers from Liberty over data breach (but cannot fine them yet) [EWN]
  2. Dominic White on hacking, SA capabilities and the Liberty breach
    - www.liberty.co.za/Pages/default.aspx#modLibertyNotice
  3. Microsoft reveals which Windows bugs it might decide not to fix [The Register]
    - get it at: msdnshared.blob.core.windows.net/media/2018/06/Microsoft-Security-Servicing-Commitments_SRD.pdf
  4. Google to Fix Location Data Leak in Google Home, Chromecast [KrebsOnSecurity]
    - Google’s Newest Feature: Find My Home (thanks Google – oh yes, we’re the product…) [TripWire]
  5. Honeypot-based Monitoring of Amplification DDoS Attacks [RIPE Labs]
  6. Attacking Private Networks from the Internet with DNS Rebinding [Medium]
    - read past the TLDR – it’s actually quite interesting…
  7. Thrip: Espionage Group Hits Satellite, Telecoms, and Defense Companies [Symantec]