SWN #285 – TREXes, WooCommerce, 3CX, Zimbra, OneNote, ChatGPT, ProPump, & Aaran Leyland

Doug White

1. Hackers inject credit card stealers into payment processing modules

2. Hackers compromise 3CX desktop app in a supply chain attack

3. Pro-Russia cyber spies target US, European govt agencies

4. Microsoft OneNote will block 120 dangerous file extensions

5. ChatGPT Data Breach Confirmed as Security Firm Warns of Vulnerable Component Exploitation

6. Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks

7. Sorry, Jurassic Park: T. Rex Had Lips

Aaran Leyland

1. ‘Vulkan files’ leak reveals Putin’s global and domestic cyberwarfare tactics

   Documents leaked by whistleblower angry over Ukraine war

   Private Moscow consultancy bolstering Russian cyberwarfare

   Tools support hacking operations and attacks on infrastructure

   Documents linked to notorious Russian hacking group Sandworm

   Russian program aims to control internet and spread disinformation

   Youtube on setting up Velociraptor: youtube.com/watch?v=EA40rztSOd4

   https://github.com/Velocidex/velociraptor

   Tutorial on how to Approach Typical DFIR Cases with Velociraptor

   https://blog.compass-security.com/2022/10/tutorial-on-how-to-approach-typical-dfir-cases-with-velociraptor/