C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 34-18

- Roderick Mooi

  1. 10 Steps to Cyber Security [NCSC]
    - sneak preview / useful infographic on the Download tab
  2. Phishing attack on Augusta University Health leads to breach exposing info on 400K persons [SC]
  3. Severe PHP Exploit Threatens WordPress Sites with Remote Code Execution [threatpost]
    - see also: So phar, so FUD: PHP flaw puts WordPress sites at risk of hacks [The Register]
  4. Two DDoS Friendly Bugs Fixed in Linux Kernel [Bleeping Computer]
    - see also: Back to the 90’s: FragmentSmack [SANS ISC]
  5. IPsec VPN Connections Broken Using 20 Year Old Flaw [Latest Hacking News]
  6. Instagram users are reporting the same bizarre hack [Mashable]
  7. New Man-in-the-Disk attack leaves millions of Android phones vulnerable [The Hacker News]
  8. Between You, Me, and Google: Problems With Gmail’s “Confidential Mode” [EFF (the other one)]
  9. Security flaw reported on Gauteng school applications website [MyBroadband]
  10. Melbourne teen hacked into Apple’s secure computer network, court told [The Age]
  11. In ‘Cybertropolis,’ Army begins to move its cyber training exercises into the physical world [Federal News Radio]
    - see also: China Believes Its Cyber Capabilities Lag Behind US: Pentagon [SecurityWeek]
  12. Why burnout happens in Information Security [CSO]
  13. Spliced Wire: How an international hacker network turned stolen press releases into $100 million [The Verge]