Sans News bites for March 10, 2023

SANS NewsBites - Annotated News Update from the Leader in Information Security Training, Certification and Research

There are a few items that we have either covered, or read up on.

Top of the news

  • FBI is Investigating DC Health Link Data Breach
  • GitHub Rolling Out Mandatory Multifactor-Factor Authentication for Developers
  • Updates Available to Address Jenkins Vulnerabilities

This blog post was the blog post I posted when covering this post of the 70,000 from this latest breach. They had some interesting coverage of this in the newsletter. They also link to other sources of reading besides the one I found through mastodon.

The article I read in regards to this breach was DC health exchange breach affects former national security officials, Congress which I found interesting.

Other news

Here are other highlights from the newsletter.

  • Acer Acknowledges Document Server Breach
  • Malware Campaign Targets Unpatched SonicWall Devices; Update Available
  • TSA Cybersecurity Issues Emergency Amendment Cybersecurity Rules for  Aviation Sector
  • Wray: FBI Bought Location Data
  • Fortinet Releases Patches  for Multiple Vulnerabilities
  • Cisco Releases Fixes for Vulnerabilities in IOS XR Software
  • CISA Adds Three Flaws to Known Exploited Vulnerabilities Catalog
  • I blogged about the FBI buying data through this blog post and that was interesting among itself. The commentary on the FBI doing this was interesting. They say no, and I wouldn’t buy location data or any other data.

    This is my blog post on Acer leading to an article talking about it. Hopefully we’ll learn from this.


    There’s more, but these are the things I covered, so here is the link to this newsletter and I hope you find something of value. Thanks for reading!


    Discover more from The Technology blog and podcast

    Subscribe to get the latest posts sent to your email.

    Leave a Reply

    This site uses Akismet to reduce spam. Learn how your comment data is processed.