C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 38/21

2021-09-23 15:47 - Kgwadi Matenche

Security News:
- New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures [Ravie Lakshmanan, The Hacker News]
- Hundreds of Thousands of Credentials Leaked Due to Microsoft Exchange Protocol Flaw [Eduard Kovacs, SecurityWeek]
- Department of Justice hack — all backups gone and R33 million ransom demanded [Myles Illidge, MyBroadband]
Breaches & Leaks:
- Data of 106 Million Visitors to Thailand Breached [Sarah Coble, Infosecurity Magazine]
- African Bank debt collector hit by ransomware — client data exposed [MyBroadband]
Email-Borne Threats:
- Microsoft uncovers giant Phishing-as-a-Service operation [Catalin Cimpanu, The Record]
Vulnerabilities & Patches:
- VMware Warns of Ransomware-Friendly Bug in vCenter Server [Lisa Vaas, Threatpost]
- Mirai Botnet Actively Exploiting OMIGOD Flaw [Mihir Bagwe, Bank Info Security]
- New macOS zero-day bug lets attackers run commands remotely [Sergiu Gatlan, Bleeping Computer]
Others:
- Hackers leak LinkedIn 700 million data scrape [Catalin Cimpanu, The Record]
- Plugging the holes: How to prevent corporate data leaks in the cloud [Phil Muncaster, WeLiveSecurity]
- LG acquires Israeli automotive cybersecurity startup Cybellum [Cho Mu-Hyun, ]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2