C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 27/21

2021-07-09 10:06 - Renier van Heerden

Ransomware
- REvil ransomware hits 1,000+ companies in MSP supply-chain attack [Lawrence Abrams, Bleeping Computer]
- This major ransomware attack was foiled at the last minute. Here’s how they spotted it [Danny Palmer, ZDNet]
- South African firms hit by ransomware attack — and hackers want R1 billion [Dawid Snyders, Mybroadband]
- Up to 1,500 businesses infected in one of the worst ransomware attacks ever [Dan Goodin, Arstechnica]
- Code in huge ransomware attack written to avoid computers that use Russian, says new report [Ken Dilanian, NBC News]
- Researchers Reproduce Exploit Used in Kaseya Hack [Eduard Kovacs, Security Week]
Patch
- Microsoft shares mitigations for Windows PrintNightmare zero-day bug [Sergiu Gatlan, Bleeping Computer]
- Windows emergency patch fixes critical security flaw — Update now [Hanno Labuschagne, Mybroadband]
Hacking
- Russian hackers are trying to brute-force hundreds of networks [Andy Greenberg, Arstechnica]
- Website of Mongolian certificate authority served backdoored client installer [Charlie Osborne, ZDNet]
- Russia Cozy Bear Breached GOP as Ransomware Attack Hit [William Turton and Jennifer Jacobs, Bloomberg]
- These Play Store apps were stealing your Facebook password [Hanno Labuschagne, Mybroadband]
Other
- Why Email Providers Scan Your Emails [Yael Grauer, Consumer Reports]
- Kaspersky Password Manager caught out making easily bruteforced passwords [Chris Duckett, ZDNet]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2