Som du ser är vår webbplats inte anpassad för äldre webbläsare. Vi rekommenderar att du uppgraderar till en nyare webbläsare.
!!

Jobba på CERT-SE? Nu söker vi en förvaltningsledare IT inom cybersäkerhet med sista ansökningsdag 17 augusti, samt en administrativ stjärna med it-säkerhetskunskap till vår desk med sista ansökningsdag 23 augusti.

Publicerad - Veckobrev

CERT-SE:s veckobrev v.34

Äntligen fredag! Vi har sålunda åter skramlat ihop en räcka artiklar till er förströelse och bildning.

Nyheter i veckan

The Untold Story of NotPetya, the Most Devastating Cyberattack in History
https://www.wired.com/story/notpetya-cyberattack-ukraine-russia-code-crashed-the-world/

Intel rips up microcode security fix license that banned benchmarking
https://www.theregister.co.uk/2018/08/23/intel_microcode_license/

Australia's 5G security hard line is bad news for China's Huawei, ZTE
https://www.cnet.com/news/china-blocked-from-building-5g-networks-in-australia/

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product
https://securingtomorrow.mcafee.com/mcafee-labs/insight-into-home-automation-reveals-vulnerability-in-simple-iot-product/

New Wave of Mirai Leverages Open-Source Project for Cross Platform Infection Technique
https://www.symantec.com/blogs/threat-intelligence/mirai-cross-platform-infection

Xiaomi is positioning the Pocophone F1 as a hacker-friendly device
https://liliputing.com/2018/08/xiaomi-is-positioning-the-pocphone-f1-as-a-hacker-friendly-device.html

Man sues over Google’s “Location History” fiasco, case could affect millions
https://arstechnica.com/tech-policy/2018/08/did-google-violate-users-privacy-when-it-secretly-kept-location-data/

iPhone & iPad Privacy Tips
https://www.imore.com/privacy-now

Spyware Company Leaves ‘Terabytes’ of Selfies, Text Messages, and Location Data Exposed Online
https://motherboard.vice.com/en_us/article/9kmj4v/spyware-company-spyfone-terabytes-data-exposed-online-leak

New Android Malware Framework Turns Apps Into Powerful Spyware
https://thehackernews.com/2018/08/android-malware-spyware.html

This new ransomware campaign targets business and demands a massive bitcoin ransom
https://www.zdnet.com/article/this-new-ransomware-campaign-targets-business-and-demands-a-massive-bitcoin-ransom/

USBHarpoon Is a BadUSB Attack with A Twist
https://www.bleepingcomputer.com/news/security/usbharpoon-is-a-badusb-attack-with-a-twist/

North Korean Hackers Exploit Recently Patched Zero-Day
https://www.securityweek.com/north-korean-hackers-exploit-recently-patched-zero-day

My journey to securing sensitive data in Puppet code
https://puppet.com/blog/my-journey-securing-sensitive-data-puppet-code

Elders of internet hash out standards to grant encrypted message security for world+dog
https://www.theregister.co.uk/2018/08/22/ietf_draft_proposes_encrypted_message_security_for_all/

Upp i det blå

Eerie Sky Glow Called 'Steve' Isn't an Aurora, Is 'Completely Unknown' to Science
https://www.livescience.com/63385-steve-not-aurora-mystery-phenomenon.html

Gammalt men alla har inte fattat galoppen än

Two-Factor Authentication
https://sec.eff.org/uploads/upload/file/12/Two_Factor_Authentication_Handout.pdf

CERT-SE i veckan

Sårbarheter i Ghostscript med flera program

Kritisk sårbarhet i Struts 2

Sårbarhet i Cisco Email Security Appliance (ESA)

Kritisk sårbarhet i Adobe Photoshop CC