C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 29/21

2021-07-23 10:01 - Schalk Peach

Vulnerabilities
- Disable Windows print spooler or you could be hacked, says Microsoft [Joe White, Techspot]
- Sequoia: A Local Privilege Escalation Vulnerability in Linux’s Filesystem Layer [Bharat Jogi, Qualys]
- Fortinet Releases Security Updates for FortiManager and FortiAnalyzer [CISA]
- Lenovo Working on Patches for BIOS Vulnerabilities Affecting Many Laptops [Ionut Arghire, Security Week]
- Two-for-Tuesday vulnerabilities send Windows and Linux users scrambling [Dan Goodin, ArsTechnica]
Ransomware
- Don’t Wanna Pay Ransom Gangs? Test Your Backups. [Krebs on Security]
- Kaseya gets master decryptor to help customers still suffering from REvil attack [Dan Goodin, ArsTechnica]
NSO Group
- NSO Group Hacked [Schneier on Security]
- The Pegasus Project [The Guardian]
- Emmanuel Macron identified in leaked Pegasus project data [Angelique Chrisafis, Dan Sabbagh, Stephanie Kirchgaessner and Michael Safi, The Guardian]
- Amazon Shuts Down NSO Group Infrastructure [Joseph Cox, Vice]
Local News
- Transnet hacked — South Africa’s port systems offline [Jan Vermeulen, MyBroadband]
- Fight over Internet domains in South Africa [Jan Vermeulen, MyBroadband]
General
- Today’s massive Internet outage comes courtesy of Akamai Edge DNS [Jim Salter, ArsTechnica]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2