C410 A2BE CB73 EF77 746E 9682 E2C4 91CE D20D 800F

Infosec bits for week 51/20

2020-12-18 13:38 - Roderick Mooi

SolarWinds Orion updates
- SANS Emergency Webcast: What you need to know about the SolarWinds Supply-Chain Attack [Jake Williams, SANS]
- SolarWinds Security Advisory [SolwarWinds]
- Alert (AA20-352A): Advanced Persistent Threat Compromise of Government Agencies, Critical Infrastructure, and Private Sector Organizations [CISA]
- SolarWinds hackers have a clever way to bypass multi-factor authentication [Dan Goodin, Ars Technica]
- SUPERNOVA: SolarStorm’s Novel .NET Webshell [Palo Alto Networks]
Education sector
- Alert (AA20-345A): Cyber Actors Target K-12 Distance Learning Education to Cause Disruptions and Steal Data [CISA]
Learning
- Operational network security – training sessions Aug 2020 to Feb 2021 (new DNS security modules added) [GÉANT / DFN / DFN-CERT]
  - Slides
  - YouTube Playlist
Web application security
- Web Security Testing Guide v4.2 Released [Victoria Drake, OWASP]
  - Get it at https://github.com/OWASP/wstg/
General interest
- Migration delays prevent AD-centric zero trust security framework adoption [Help Net Security]
- Emulated mobile devices used to steal millions from US, EU banks [Sergiu Gatlan, Bleeping Computer]
- Inherently Vulnerable By Design [Defense in Depth (podcast)]
- I am the Chief Security Officer at Akamai and I make the internet suck less. Ask me anything!

Contact Us:	csirt { a } sanren.ac.za

PGP Keys:
CSIRT		0xE2C491CED20D800F
Renier		0x11A7B70A4B81468E
Kgwadi		0x9FF01A35A5726937
Sicelo		0xA6CCD44FD770057B
Heloise		0x96371C4C9FA23CAC
Maajied		0xEE9BE86AD16D89C2