C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 49/21

2021-12-10 13:28 - Schalk Peach

Ransomware
- Threat Actors Give Victim School District A Free Decryptor [DataBreaches.net]
- Emotet’s Back And It Isn’t Wasting Any Time [Pieter Arntz, MalwareBytes]
- The Worst And Most Notable Ransomware – A Quick Guide For Security Pros [CSO Online]
- US Military Hacking Unit Publicly Acknowledges Taking Offensive Action To Disrupt Ransomware Operations [Sean Lyngaas, CNN]
Exploits
- Windows 10 RCE – The exploit is in the link [Fabian Bräunlein, Lukas Euler, Positive Security]
Phishing
- Convincing Microsoft phishing uses fake Office 365 spam alerts [Sergui Gatlan, BleepingComputer]
- University Targeted Credential Phishing Campaigns Use COVID-19 Omicron Themes [Selena Larson And Jake G, Proofpoint]
Governance
- New Federal Government Cybersecurity Incident and Vulnerability Response Playbooks [CISA]
- CIS Control 01 – Inventory and Control of Enterprise Assets [Matthew Jerzewski, Tripwire]
Technical
- What are buffer overflow attacks and how are they thwarted? [Rene Holt, ESET WeLiveSecurity]
Education
- Adapting Higher Education To Address The Cybersecurity Skills Shortage [Helga Labus, HelpnetSecurity]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2