C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 32/22

2022-08-12 13:23 - Heloise Meyer

Cybersecurity News:
- Cisco hacked through employee’s compromised Google account [Bloomberg, MyBroadband]
- More than a dozen companies developing single standard to detect cyberattacks faster [Brian Fung, CNN]
- The Business of Hackers-for-Hire Threat Actors [The Hacker News, The Hacker News]
Malware:
- Researchers Look Inside Russian Malware Targeting Ukrainian Power Grid [Max Eddy, PCMag]
- Hackers install Dracarys Android malware using modified Signal app [Bill Toulas, BleepingComputer]
- Great, Now the Apple App Store Has Malware Too [Brendan Hesse, Life Hacker]
Vulnerabilities & Patches:
- Microsoft calls on IT admins to take extra steps to shield against Exchange vulnerabilities [Sead Fadilpasic, TechRadar]
- Serious Windows and Linux UnRAR vulnerabilities exploited in the wild [Rual de Vries, MyBroadband]
- Security vulnerabilities found in Intel and AMD processors [Martin Brinkmann, Ghacks]
- Microsoft Patches ‘Dogwalk’ Zero-Day and 17 Critical Flaws [Threatpost, Threatpost]
- Researchers Warn of Ongoing Mass Exploitation of Zimbra RCE Vulnerability [Ravie Lakshmanan, The Hacker News]
- IBM Patches High-Severity Vulnerabilities in Cloud, Voice, Security Products [Ionut Arghire, Security Week]
- Deepfakes expose vulnerabilities in certain facial recognition technology [Jessica Hallman, PennState]
Other:
- Google’s massive 144 Tbps undersea cable lands in South Africa [Jan Vermeulen, MyBroadband]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2