C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 45/22

2022-11-11 11:34 - Renier van Heerden

Attaks
- Microsoft Blames Russian Hackers for Prestige Ransomware Attacks on Ukraine and Poland [Ravie Lakshmanan, The Hacker News]
- AstraZeneca password lapse exposed patient data [Zack Whittaker, TechCrunch]
- Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File [Ravie Lakshmanan, The Hacker News]
- Several Cyber Attacks Observed Leveraging IPFS Decentralized Network [Ravie Lakshmanan, The Hacker News]
International
- Ukraine war, geopolitics fuelling cybersecurity attacks -EU agency [Foo Yun Chee, Reuters]
- Spymax RAT Targets Indian Defense Personnel [Cyfirma Team, Cyware]
- Twitter Security Chief Resigns as Musk Sparks Deep Concern [AFP, Security week]
- APT29 Exploited a Windows Feature to Compromise European Diplomatic Entity Network [Ravie Lakshmanan, The Hacker News]
Security Guides
- NSA Releases Guidance on How to Protect Against Software Memory Safety Issues [Press Release, National Security Agency]
- Balancing Security Automation and the Human Element [Marc Solomon, Security week]
- Offense Gets the Glory, but Defense Wins the Game [Derek Manky, Security week]
Notewothy Patches
- Google Patches High-Severity Privilege Escalation Vulnerabilities in Android [Ionut Arghire, Security week]
- Microsoft Patches MotW Zero-Day Exploited for Malware Delivery [Eduard Kovacs, Security week]
- Intel, AMD Address Many Vulnerabilities With Patch Tuesday Advisories [Eduard Kovacs, Security week]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2