Sans News Bites, October 11, 2022

I tried this once before, but I’m going to try again.

SANS always has things of interest, and their news bites may be of interest.

For those who want to read it, here is the email as a web page.

Top of the news

ATHENE Research Center: Resource Public Key Infrastructure is Broken

US HHS HC3 Presentation on Risks Posed by Legitimate Security Tools

Fortinet: Patch Critical Authentication Bypass Flaw Now

The rest of the news

• Lloyd’s of London is Investigating “Unusual Activity” on its Network
• Microsoft Updates Exchange Server Mitigations Again
• Zimbra Vulnerability Remains Unpatched
• CISA Schedules Additional Listening Session for Incident Reporting Rules Input
• Cancer Testing Lab Reports Second Data Breach in Six Months
• Intel Acknowledges Alder Lake BIOS Leak
• macOS Archive Utility Vulnerability

We’re concerned about the exchange server bugs again, as I’m still unclear if a patch has been released for them. I’m glad that the Mac was updated in july to fix a bug in Safari. This is the last story in today’s news from Sans.

Remember that Sans releases Tuesdays and Fridays. I hope that this finds you well, and find the news that is of interest to you. Thanks so much for reading!