Network Security News Summary for Friday January 21st, 2022
Channel: Internet Storm Center Stormcast
Date: 21/01/2022

RedLine Stealer; Google QR Code Bug; Linux Kernel Bug; Crypto.com 2FA Bypass; Windows GPOs to Avoid

RedLine Stealer Delivered Through FTP
 https://isc.sans.edu/forums/diary/RedLine+Stealer+Delivered+Through+FTP/28258/

Google Camera Alters QR Codes
 https://www.heise.de/hintergrund/Googles-Kamera-verfaelscht-Links-in-QR-Codes-6332669.html
 https://www.androidpolice.com/google-camera-randomly-changes-some-qr-code-urls-on-android-12/

Linux Kernel Privilege Escalation / Container Escape
 https://seclists.org/oss-sec/2022/q1/54
 https://access.redhat.com/security/cve/cve-2022-0185

Crypto.com 2FA Bypass
 https://threatpost.com/2fa-bypassed-crypto-com-heist/177846/

Windows Policies to Avoid
 https://techcommunity.microsoft.com/t5/windows-it-pro-blog/why-you-shouldn-t-set-these-25-windows-policies/ba-p/3066178

keywords: windows; group policies; crypto.com; 2FA; MFA; Linux; kernel; camera; qr code; google ftp; redline