ISC StormCast for Thursday, July 14th, 2022

Using Referrers to Detect Phishing Attacks

https://isc.sans.edu/diary/Using+Referers+to+Detect+Phishing+Attacks/28836

Callback Phishing Campaigns Impersonating Security Companies

https://www.crowdstrike.com/blog/callback-malware-campaigns-impersonate-crowdstrike-and-other-cybersecurity-companies/

Retbleed Spectre Attack

https://comsec.ethz.ch/wp-content/files/retbleed_sec22.pdf

Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706

https://www.microsoft.com/security/blog/2022/07/13/uncovering-a-macos-app-sandbox-escape-vulnerability-a-deep-dive-into-cve-2022-26706/

Buffer Overflow Vulnerabilities in UEFI firmware of several Lenovo Notebook

https://twitter.com/ESETresearch/status/1547166334651334657

amd business callback computer cyber cybersecurity daily eset hacking infosec intel internet isc july lenovo macos microsoft network phishing referrer retbleed sandbox security security companies spectre uefi