C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 33/20

2020-08-13 16:03 - Roderick Mooi

Higher Ed Attacks / Breaches:
- AAU IT Services – Alert – Information about IT systems after critical IT [security] incident [Aalborg University]
- Hackers publish Australian universities’ ProctorU data [Nina Dillon Britton and Chuyi Wang, Honi Soit]
- Michigan State University discloses credit card theft incident [Sergiu Gatlan, Bleeping Computer]
- IVC Hit With Ransomware Attack; Multiple Systems Impacted and Remain Offline [Richard Montenegro Brown and Jayson Barniske, Calexico Chronicle]
Other Breaches / Leaks:
- Intel investigating breach after 20GB of internal documents leak online [Catalin Cimpanu, Zero Day]
- Lesson learned: Failure to patch led to password leak of 900 VPN enterprise servers [Teri Robinson, SC Media]
Awareness / Detection:
- Ransomware: These warning signs could mean you are already under attack [Steve Ranger, Zero Day]
Advisories / Patches:
- Microsoft August 2020 Patch Tuesday fixes 120 vulnerabilities, two zero-days [Catalin Cimpanu, Zero Day]
- Cisco alert: Four high-severity flaws in routers, switches and AnyConnect VPN for Windows [Liam Tung, Zero Day]
  - see also: Reminder: Patch Cisco ASA / FTD Devices (CVE-2020-3452). Exploitation Continues
- Critical Intel Flaw Afflicts Several Motherboards, Server Systems, Compute Modules [Lindsey O’Donnell, Threatpost]
- Nearly 50% of all smartphones affected by Qualcomm Snapdragon bugs [Sergiu Gatlan, Bleeping Computer]
- Critical ManageEngine ADSelfService Plus RCE flaw patched [Zeljka Zorz, Help Net Security]
General
- DEF CON 2020 Wrap-Up: Hacking Phones, Cars and Satellites [Eduard Kovacs, Security Week / Wired Business Media]
- Keeping the mysteries of the universe safe from hackers [Indiana University]
- This is node joke. Tor battles to fend off swarm of Bitcoin-stealing evil exit relays making up about 25% of outgoing capacity at its height [Shaun Nichols, The Register / Situation Publishing]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2