C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 49/20

- Schalk Peach

  1. ABSA Data Leak
    1. Absa bank embroiled in data leak, rogue employee accused of theft [Charlie Osborne, ZDNet]
    2. Absa data leak update: ID numbers, vehicle details among stolen info [Business Insider]
    3. Details about person behind Absa data breach emerge [MyBroadband]
  2. Cybercrimess Bill Passed
    1. Parliament passes Cybercrimes Bill [MyBroadband via BusinessTech]
  3. Exploitable Vulnerabilities
    1. iPhone zero-click Wi-Fi exploit is one of the most breathtaking hacks ever [Dan Goodin, Ars Technica]
    2. FortiNet: Update Regarding CVE-2018-13379 [Carl Windsor, Fortinet]
    3. Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOW [Ravie Lakshmanan, The Hacker News]
    4. VMWare VMSA-2020-0027.2 Update [VMWare]
    5. Multiple vulnerabilities in WebKit [Jon Munshaw, Talos Intelligence]
  4. Education and Academia
    1. Ransomware halts classes for 115,000 Baltimore pupils [BBC News]
    2. University of Vermont Medical Center has yet to fully recover from October cyber attack [Pierluigi Paganini, Security Affairs]
    3. Alabama school district shut down by ransomware attack [Lawrence Abrams, Bleeping Computer]
  5. Hacker Techniques
    1. How attackers exploit Window Active Directory and Group Policy [Susan Bradley, CSO Online]
  6. Container Security
    1. A scan of 4 Million Docker images reveals 51% have critical flaws [Perluigi Paganini, Security Affairs]
    2. Half of all Docker Hub images have at least one critical vulnerability [Lucian Constantin, CSO Online]
    3. Misconfigured Docker Servers Under Attack by Xanthe Malware [Lindsey O’Donnell, Threat Post]
  7. Governance and the Year in Review
    1. Notable Enhancements to the New Version of NIST SP 800-53 [Steven Tipton, Tripwire]
    2. The NCSC Annual Review 2020 [NCSC]
    3. The biggest hacks, data breaches of 2020 [Charlie Osborne, ZDNet]