ISC StormCast for Wednesday, May 31st, 2023

Malspam Pushes ModiLoader Infection for Remocs Rat

https://isc.sans.edu/diary/Malspam%20pushes%20ModiLoader%20%28DBatLoader%29%20infection%20for%20Remcos%20RAT/29896

MacOS SIP Bypass

https://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/

OpenSSL Update

https://www.openssl.org/news/secadv/20230530.txt

Barracuda Email Security Gateway Applicance Vulnerability Details

https://www.barracuda.com/company/legal/esg-vulnerability#:~:text=the%20section%20below.-,Endpoint%20IOCs,-Table%204%20lists

Void Rabisu RomCom Backdoor

https://www.trendmicro.com/en_us/research/23/e/void-rabisu-s-use-of-romcom-backdoor-shows-a-growing-shift-in-th.html

Nextcloud Vulnerability

https://github.com/nextcloud/security-advisories/security/advisories/GHSA-mr7q-xf62-fw54

Zyxel NAS Vulnerability

https://sternumiot.com/iot-blog/ntp-textbox-vulnerability-in-zyxel-nas326-nas540-and-nas542-devices/

Wait Just An Infosec: Higher Ed

https://www.youtube.com/watch?v=ufEuo-096yc&list=PLtgaAEEmVe6B2kqkE9KdgPJdtbqNiaiOn&index=8

apple backdoor barracuda business bypass computer cyber cybersecurity daily ed email email security gateway hacking higher higher ed infection infosec internet isc macos malspam may modiloader nas network nextcloud openssl rat romcom security security gateway sip update vulnerability zyxel