C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 40/22

2022-10-10 08:07 - Kgwadi Matenche

Security News:
- LofyGang hackers built a credential-stealing enterprise on Discord, NPM [Bill Toulas, Bleeping Computer]
- CISA: Multiple APT Groups Infiltrate Defense Organization [Robert Lemos, Dark Reading]
Malware:
- Eternity Group Hackers Offering New LilithBot Malware-as-a-Service to Cybercriminals [Ravie Lakshmanan, The Hacker News]
Breaches & Leaks:
- Telstra Telecom discloses data breach impacting former and current employees [Pierluigi Paganini, Security Affairs]
- LA officials confirm ransomware group leaked students’ personal data [Jonathan Creig, The Record]
Vulnerabilities & Patches:
- Fortinet warns admins to patch critical auth bypass bug immediately [Sergiu Gatlan, Bleeping Computer]
- Microsoft updates guidance for ‘ProxyNotShell’ bugs after researchers get around mitigations [Jonathan Creig, The Record]
Others:
- Hackers Have It Out for Microsoft Email Defenses [Tara Seals, Dark Reading]
- Facebook users warned: You may have downloaded these password-stealing Android and iOS apps [Danny Palmer, ZDNet]
- Server with financial data “stolen” after R150 million looting controversy [Bradley Prior, MyBroadband]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2