C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 41/22

2022-10-14 14:49 - Heloise Meyer

Cybersecurity News:
- Goodbye passwords — Google rolling out passkey support to Android and Chrome [Hanno Labuschagne, MyBroadband]
- Windows 11 Now Offers Automatic Phishing Protection [David Nield, Wired]
- Toyota Data Breach – Over 300,000 Customer Details Exposed [Guru, Cyber Security News]
Hacks:
- Hackers have stolen record $3 billion in cryptocurrency this year [Khristopher J Brooks, CBS News]
- Budworm Hackers Resurface with New Espionage Attacks Aimed at U.S. Organization [Ravie Lakshmanan, The Hacker News]
Malware:
- Magniber ransomware now infects Windows users via JavaScript files [Bill Toulas, Bleeping Computer]
- QBot Malware Infects Over 800 Corporate Users in New, Ongoing Campaign [Ionut Arghire, Security Week]
Vulnerabilities & Patches:
- PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active Attacks [Ravie Lakshmanan, The Hacker News]
- WordPress Vulnerability In Shortcodes Ultimate Impacts 700,000 Sites [Roger Montti, Search Engine Journal]
- Aruba fixes critical RCE and auth bypass flaws in EdgeConnect [Bill Toulas, Bleeping Computer]
- Critical Remote Code Execution Vulnerability Found in vm2 Sandbox Library [Ionut Arghire, Security Week]
Other:
- Unofficial WhatsApp Android app caught stealing users’ accounts [Bill Toulas, Bleeping Computer]
- Hackers Using Vishing to Trick Victims into Installing Android Banking Malware [Ravie Lakshmanan, The Hacker News]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2