C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 31/20

- Schalk Peach

  1. ‘BootHole’ attack impacts Windows and Linux systems using GRUB2 and Secure Boot [Catalin Cimpanu, ZDNet Zero Day]
  2. BootHole issue allows installing a stealthy and persistent malware [Pierluigi Paganini, Security Affairs]
  3. Zoom bug allowed attackers to crack private meeting passwords [Sergiu Gatlan, Bleeping Computer]
  4. Multiple Tor security issues disclosed, more to come [Catalin Cimpanu, ZDNet Zero Day]
  5. Open source F5 Big-IP exploit detector released [Juha Saarinen, it news]
  6. Expanse Researchers Show More Than 8,000 F5 BIG-IP TMUIs Are Still Exposed on the Internet [Expanse]
  7. CISA: Attackers Are Exploiting F5 BIG-IP Vulnerability [Prajeet Nair, Data Breach Today]
  8. Cisco fixes severe flaws in data center management solution [Sergiu Gatlan, Bleeping Computer]
  9. Patch now: Cisco warns of nasty bug in its data center software [Liam Tung, ZDNet]
  10. If you own one of these 45 Netgear devices, replace it [Gareth Corfield, The Register]
  11. Over Half of Universities Suffered Data Breach in Past Year [Phil Muncaster, Infosecurity Magazine]
  12. Introducing PhishingKitTracker [Marco Ramilli]
  13. Microsoft releases open-source Linux version of Procmon tool [Lawrence Abrams, Bleeping Computer]