C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 42/21

2021-10-25 08:48 - Sicelo Ncekana

Vulnerabilities
- Cisco SD-WAN Security Bug Allows Root Code Execution [Tara Seals, Threat post]
- Slack contains an XSLeak vulnerability that de-anonymizes users [Ben Dickson, The Daily Swig]
- Oracle’s October 2021 CPU Includes 419 Security Patches [Ionut Arghire, Security week]
General
- The Simmering Cybersecurity Risk of Employee Burnout [Dr. Margaret Cunningham, Dark Reading]
- Penetration Testing in the Cloud Demands a Different Approach [Ievgen Soloviov, Dark Reading]
- How to Build an Incident-Response Plan, Before Security Disaster Strikes [Joseph Carson, Threat Post]
- Feds Warn BlackMatter Ransomware Gang is Poised to Strike [Elizabeth Montalbano, Threat Post]
- Why is Cybersecurity Failing Against Ransomware? [Nate Warfield, Threat Post]
- Protecting Phones From Pegasus-Like Spyware Attacks [Lisa Vaas, Threat Post]
Malware
- GriftHorse Money-Stealing Trojan Takes 10M Android Users for a Ride [Tara Seals, Threat post]
- Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild [Ravie Lakshmanan, the hacker news]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B