C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 25/21

2021-06-25 11:22 - Schalk Peach

Exploits
- Attackers Take Advantage of New Google Docs Exploit [Jeremy Fuchs, Avanan]
- VMware Releases Security Updates [US CERT]
- 30M Dell Devices at Risk for Remote BIOS Attacks, RCE [Tara Seals, ThreatPost]
- Critical Palo Alto Cyber-Defense Bug Allows Remote ‘War Room’ Access [Tara Seals, ThreatPost]
Techniques aka More Supply Chain Issues
- Hackers are trying to attack big companies. Small suppliers are the weakest link [Danny Palmer, ZDNet]
Ransomware News
- Most firms face second ransomware attack after paying off first [Eileen Yu, ZDNet]
- Data leak marketplace pressures victims by emailing competitors [Lawrence Abrams, Bleeping Computer]
- Most organizations would pay in the event of a ransomware attack [Helpnet Security]
Governance
- Tabletop exercises explained: Definition, examples, and objectives [Josh Fruhlinger, CSO Online]
General
- Most DDoS attacks originate from fewer than 50 hosting companies [Nokia]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2