March 20, 2022

CyberSecNews Weekly - 0x21-W1322

News

• The Discovery and Exploitation of CVE-2022-25636
  Learn how a Linux kernel bug was discovered

• OpenSSL Security Advisory
  A bug in OpenSSL can cause an infinite loop.

• Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted Malware
  Researchers are tracking a number of open-source "protestware" projects on GitHub that have recently altered their code to display "Stand with Ukraine" messages for users, or basic facts about the carnage in Ukraine.

Tools

• BeVigil - World’s first & only security search engine for mobile apps
  

Articles

• AWS Lambda Security Best Practices
  

• Everybody Is Invited: How FIDO Addresses a Full Range of Use Cases
  

Tutorial

• Hunting for Suspicious DNS Communications
  

• 21 Examples to Manage Secrets using AWS Secrets Manager CLI
  Using AWS Secrets manager you can store, retrieve, rotate and manage secrets such as database credentials, API keys and other sensitive information used by your application. Secrets are rotated without any disruption to your application, and you can also replicate secrets to multiple AWS regions.

• Debugging Certificate Errors
  Useful tutorial to learn how to troubleshoot certificate errors.

• Top 10 CI/CD Security Risks
  

IR & Reversing

• New Threat: B1txor20, A Linux Backdoor Using DNS Tunnel
  An analysis of the new Linux backdoor B1txor20.