C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 42/22

2022-10-21 14:55 - Kgwadi Matenche

Security News:
- Playing with fire: millions of .git folders exposed to public [Jurgita Lapienytė, Cybernews]
- Over 17000 Fortinet devices exposed online are very likely vulnerable to CVE-2022-40684 [Pierluigi Paganini, Security Affairs]
- Almost 900 servers hacked using Zimbra zero-day flaw [Bill Toulas, Bleeping Computer]
Breaches & Leaks:
- Microsoft Customer Data Exposed by Misconfigured Server [Dark Reading]
- New Data Leaks Add to Australia’s Data Security Reckoning [Jeremy Kirk, DataBreachToday]
Vulnerabilities & Patches:
- Oracle Releases 370 New Security Patches With October 2022 CPU [Ionut Arghire, Security Week]
- Researchers Keep a Wary Eye on Critical New Vulnerability in Apache Commons Text [Jai Vijayan, Dark Reading]
- Zoom for macOS Contains High-Risk Security Flaw [Ryan Naraine, Security Week]
Others:
- Car theft ring used software to steal hundreds of vehicles without the physical key fob, say police [Liam Tung, ZDNet]
- Hackney Council Ransomware Attack Cost £12m+ [Phil Muncaster, Infosecurity Magazine]
- Mango Markets Set to Pay $47M Bug Bounty to Hacker [Prajeet Nair, DataBreachToday]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2