Cybersecurity Weekly Hacker News January 13 - 19, 2023 #hacker #ransomware #cybersecurity
0:00:00 intro
0:00:28 1,000 ships impacted by a ransomware attack on DNV
0:02:12 1.7 TB of data from digital intelligence firm Cellebrite leaked online
0:03:57 Avast researchers released a free BianLian ransomware decryptor
0:06:07 A couple of bugs can be chained to hack Netcomm routers
0:08:14 Chinese hackers used recently patched FortiOS SSL-VPN flaw as a zero-day in October
0:11:01 Cisco fixes SQL Injection flaw CVE-2023-20010 in Unified CM
0:12:46 Critical bug in Cisco Small Business Routers will receive no patch
0:15:25 Critical Microsoft Azure RCE flaw impacted multiple services
0:17:37 Europol arrested cryptocurrency scammers that stole millions from victims
0:20:00 Experts found SSRF flaws in four different Microsoft Azure services
0:22:04 Experts released PoC exploit for Zoho ManageEngine RCE flaw
0:25:06 Experts spotted a backdoor that borrows code from CIA's Hive malware
0:27:29 Fortinet observed three rogue PyPI packages spreading malware
0:28:58 French CNIL fined Tiktok $5.4 Million for violating cookie laws
0:30:55 Hacker stole credit cards from Canada alcohol retailer LCBO
0:32:46 How to abuse GitHub Codespaces to deliver malicious content
0:35:55 Mailchimp discloses a new incident, the second one in 6 months
0:38:25 Managing Asset Risks During Healthcare MAs
0:41:20 Microsoft Patch Tuesday for January 2023 fixed actively exploited zero-day
0:43:00 Most internet-exposed Cacti servers exposed to hacking
0:45:37 RCE bug discovered in the popular JsonWebToken library
0:47:53 T95 Android TV Box sold on Amazon hides sophisticated malware
0:50:55 Two critical flaws discovered in Git system
0:52:43 US CISA adds Centos Web Panel RCE CVE-2022-44877 to its Known Exploited Vulnerabilities Catalog
0:54:48 US CISA adds MS Exchange bug CVE-2022-41080 to its Known Exploited Vulnerabilities Catalog
0:56:34 Thanks for watching
Ransomware
DNV
Cellebrite
Fortinet
SSL-VPN
PyPI
TikTok
Gootkit
LCBO
GitHub Codespaces
LockBit
Mailchimp
Healthcare MAs
Microsoft Patch Tuesday
Cacti
Myrocket HR platform
Zoho ManageEngine
Pro-Russia group NoName057(16)
JsonWebToken
Royal Mail
Trustanduse
StrongPity APT
Android Telegram app
Telegram servers
Control Web Panel RCE
Git
US CISA
Centos Web Panel RCE
MS Exchange bug
Zoom Rooms