C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 46/20

- Schalk Peach

  1. Patch EveryDay
    1. Intel fixes 95 vulnerabilities in November 2020 Platform Update [BleepingComputer, Sergiu Gatlan]
    2. Microsoft Exchange Server ExportExchangeCertificate WriteCertiricate File Write Remote Code Execution Vulnerability [SourceIncite]
    3. Office November security updates fix remote code execution bugs [BleepingComputer, Sergiu Gatlan]
    4. Remote kernel heap overflow in NFSv3 Windows Server [McAfee, Eoin Carroll and Steve Povolny]
    5. Microsoft Security Update Guide [Microsoft]
    6. Changes to Microsoft Security Bulletins [TripWire, Tyler Reguly]
  2. Attacks
    1. DNS cache poisoning, the Internet attack from 2008, is back from the dead [Ars Technica, Dan Goodin]
    2. How to get root on Ubuntu 20.04 by pretending nobody’s /home [Kevin Backhouse]
  3. Academia and Research
    1. Cyberattack on University of Vermont hospital IT network [CyberScoop, Sean Lyngaas]
    2. Price Dropped on Hacked Educational RDP Details [InfoSecurity Magazine, Dan Raywood]
    3. Open University Targeted With Over a Million Malicious Email Attacks So Far This Year [InfoSecurity Magazine, James Coker]
    4. European weather services hit by storm of malicious email attacks [NewScientist, Adam Vaughan]
  4. Sad News about the Arecibo Observatory
    1. Second Cable Fails at Arecibo Observatory – Massive Radio Telescope Used in the Search for Alien Life [SciTechDaily]