Summary news Nov 1

?? Australia's Department of Defence becomes latest victim of regional ransomware attacks ??

Military information was not stolen in the breach, which may affect the records of 40,000 defence personnel

?? Read in "ITPro".

?? MSPs' next biggest investment will be in MDR and dark web monitoring ??

Research showed that providers were torn on the decisions of what their next big offering will be

?? Read in "ITPro".

?? SHA-3 code execution bug patched in PHP – check your version! ??

As everyone waits for news of a bug in OpenSSL, here's a reminder that other cryptographic code in your life may also need patching!

?? Read in "Naked Security".

?? Researchers reveal details of a critical authentication bypass vulnerability in Jupyter ??

Notebooks for Microsoft Azure Cosmos DB, which could have allowed attackers to achieve remote code execution on containers.

Read in "Hacker News"

??An Unofficial Patch Has Been Released for Actively Exploited Windows MoTW Zero-Day??

There is an unofficial patch from 0patch for a Zero-Day flaw in Microsoft Windows that allows bypassing the MotW (Mark-of-the-Web) protections that are built into the operating system and at moment it’s actively exploited.

Read in "GBHackers"

??CVE-2022-3786 and CVE-2022-3602: Two High-Severity Buffer Overflow Vulnerabilities in OpenSSL Fixed ??

The?OpenSSL?project?released?version 3.0.7 on November 1, 2022, to address?CVE-2022-3786 and CVE-2022-3602, two high-severity vulnerabilities affecting OpenSSL’s 3.0.x version stream discovered and reported by Polar Bear and Viktor Dukhovni.

Read in "Rapid 7"

?? FTC Gives Chegg an 'F' for Careless Cybersecurity Impacting 40M Students ??

Ed-tech company Chegg is ordered by FTC to secure its systems after repeated breaches that exposed tens of millions of users' personal data.

Read in "Dark Reading"

#cybersecurity #cybersec