C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 48/22

2022-12-02 17:51 - Sicelo Ncekana

Security News
- Postbank loses over R18-million to cybercrime attacks in three months [Marecia Damons, Algoa FM]
- Samsung, LG, Mediatek certificates compromised to sign Android malware [Nitzan Yaakov, Aqua Blog]
- Web browsers drop mysterious company with ties to U.S. military contractor [Joseph Menn, The Washington Post]
- LastPass Suffers Another Security Breach; Exposed Some Customers Information [Ravie Lakshmanan, The Hacker News]
Phishing and Malware
- Vanuatu officials turn to phone books and typewriters, one month after cyber attack [Christopher Cottrell, Tech Guardian]
- Ransomware group may have stolen customer bank details from British water company [Alexander Martin, The Record]
- Samsung, LG, Mediatek certificates compromised to sign Android malware [Sergiu Gatlan, Bleeping Computer]
- Android malware infected 300,000 devices to steal Facebook accounts [Gandalf_The_Grey, Malware Tips]
- New DuckLogs malware service claims having thousands of ‘customers’ [Bill Toulas, Bleeping Computer]
Vulnerabilities & Patches
- CISA Warns of Multiple Critical Vulnerabilities Affecting Mitsubishi Electric PLCs [Ravie Lakshmanan, The Hacker News]
- Tailscale VPN nodes vulnerable to DNS rebinding, RCE [Ben Dickson, The Daily Swing]
- Secret Network resolves network vulnerability following white hat disclosure [ZHIYUAN SUN, Cointelegraph]
- Researchers Detail AppSync Cross-Tenant Vulnerability in Amazon Web Services [Ravie Lakshmanan, The Hacker News]
- Remote Code Execution Vulnerability Found in Windows Internet Key Exchange [Alessandro Mascellino, Info Security]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2