C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 47/22

2022-11-25 15:06 - Kgwadi Matenche

Cybersecurity News:
- Interpol Seized $130 Million from Cybercriminals in Global “HAECHI-III” Crackdown Operation [Ravie Lakshmanan, The Hacker News]
Phishing:
- Phishing Attack Targets Microsoft Users Via HTML Attachment [Amy Griffiths, Cofense Phishing Defense Center]
Vulnerabilities & Patches:
- Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products [Ravie Lakshmanan, The Hacker News]
- Microsoft releases out-of-band update to fix Kerberos auth issues caused by a patch for CVE-2022-37966 [Pierluigi Paganini, Security Affairs]
- Google pushes emergency Chrome update to fix 8th zero-day in 2022 [Bill Toulas, Bleeping Computer]
Breaches & Leaks:
- Tata Power Attack Linked to Bug in Nearly 20-Year-Old Server [Mihir Bagwe, DataBreachToday]
- Daixin Ransomware Gang Steals 5 Million AirAsia Passengers’ and Employees’ Data [Ravie Lakshmanan, The Hacker News]
Malware:
- Backdoored Chrome extension installed by 200,000 Roblox players [Ax Sharma, Bleeping Computer]
Others:
- WhatsApp data leak: 500 million user records for sale [Jurgita Lapienytė, Cybernews]
- TikTok scrambling to avoid possible ban in the US [Bloomberg, MyBroadband]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2