Network Security News Summary for Thursday July 14th, 2022
Channel: Internet Storm Center Stormcast
Date: 14/07/2022

Phishing Referrers; Callback Phishing; Retbleed Spectre; MacOS Sandbox Escape; Lenovo UEFI

Using Referrers to Detect Phishing Attacks
 https://isc.sans.edu/diary/Using+Referers+to+Detect+Phishing+Attacks/28836

Callback Phishing Campaigns Impersonating Security Companies
 https://www.crowdstrike.com/blog/callback-malware-campaigns-impersonate-crowdstrike-and-other-cybersecurity-companies/

Retbleed Spectre Attack
 https://comsec.ethz.ch/wp-content/files/retbleed_sec22.pdf

Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706
 https://www.microsoft.com/security/blog/2022/07/13/uncovering-a-macos-app-sandbox-escape-vulnerability-a-deep-dive-into-cve-2022-26706/

Buffer Overflow Vulnerabilities in UEFI firmware of several Lenovo Notebook 
 https://twitter.com/ESETresearch/status/1547166334651334657

keywords: uefi; lenovo; eset; macos; sandbox; microsoft; retbleed; spectre; intel; amd; phishing; referrer; callback; security companies