C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 50/22

2022-12-15 12:16 - Heloise Meyer

Hacking News:
- Details of 77,000 Uber employees exposed in hack — Report [Bloomberg, MyBroadband]
- By the way, the Reserve Bank was hacked [Bloomberg, BusinessTech]
- The FBI’s Cybersecurity Program for Critical Infrastructure Was Hacked [Lucas Ropek, Gizmodo]
- Cycling South Africa suspends Zwift racer caught hacking data during world championships qualifier [Dan Alexander, Road.cc]
- Elite Hackers Made Almost $1 Million Last Week, Here’s How [Davey Winder, Forbes]
Vulnerabilities:
- New Actively Exploited Zero-Day Vulnerability Discovered in Apple Products [Ravie Lakshmanan, The Hacker News]
- Fortinet confirms VPN vulnerability exploited in the wild [Arielle Waldman, TechTarget]
- Microsoft December 2022 Patch Tuesday fixes 2 zero-days, 49 flaws [Lawrence Abrams, BleepingComputer]
Malware:
- New Python malware backdoors VMware ESXi servers for remote access [Bill Toulas, BleepingComputer]
- Effective, fast, and unrecoverable: Wiper malware is popping up everywhere [Dan Goodin, Ars Technica]
- New GoTrim Botnet Attempting to Break into WordPress Sites’ Admin Accounts [Ravie Lakshmanan, The Hacker News]
- Clop ransomware uses TrueBot malware for access to networks [Bill Toulas, BleepingComputer]

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2