Network Security News Summary for Tuesday January 25th, 2022

From SANS Internet Storm Center's Daily Network Security News Podcast Johannes B. Ullrich

UEFI Malware; Sonicwall Exploit; Dell EMC AppSync Vuln; Leaked Twitter Keys Moonbound UEFI Malware https://securelist.com/moonbounce-the-dark-side-of-uefi-firmware/105468/ Exploit of Sonicwall CVE-2021-20038 https://twitter.com/buffaloverflow/status/1485671824725786633 Dell EMC AppSync Vulnerability https://www.dell.com/support/kbdoc/de-de/000195377/dsa-2022-003-dell-emc-appsync-security-update-for-multiple-vulnerabilities Twitter API Keys Leaked in GitHub https://incognitatech.medium.com/using-twitter-to-notify-careless-developers-the-unorthodox-way-d71478ad367a keywords: twitter; api keys; github; dell; emc; appsync; uefi; moonbound; sonicwall