CERT-SE:s veckobrev v.08

Trevlig helg önskar CERT-SE med veckans cyberintressanta lästips.

MikroTik Firewall & NAT Bypass
https://medium.com/tenable-techblog/mikrotik-firewall-nat-bypass-b8d46398bf24

WiFi Hides Inside a USB Cable
https://hackaday.com/2019/02/18/wifi-hides-inside-a-usb-cable/

Phishing Campaign Spoofs United Nations and Multiple Other Organizations
https://www.anomali.com/blog/phishing-campaign-spoofs-united-nations-and-multiple-other-organizations

North Korea Turns Against New Targets?!
https://research.checkpoint.com/north-korea-turns-against-russian-targets/

Breaking out of Docker via runC – Explaining CVE-2019-5736
https://www.twistlock.com/labs-blog/breaking-docker-via-runc-explaining-cve-2019-5736/

Extracting a 19 Year Old Code Execution from WinRAR
https://research.checkpoint.com/extracting-code-execution-from-winrar/

Kali Linux 2019.1 Released
https://www.kali.org/news/kali-linux-2019-1-release/

Switzerland offers cash for finding security holes in its e-voting system
https://www.welivesecurity.com/2019/02/19/switzerland-security-holes-e-voting-system/

Nike’s self-lacing sneakers turn into bricks after faulty firmware update
https://arstechnica.com/gadgets/2019/02/my-left-shoe-wont-even-reboot-faulty-app-bricks-nike-smart-sneakers/

Cr1ptT0r Ransomware Targets Embedded Systems, Infects D-Link NAS Gear
https://www.bleepingcomputer.com/news/security/cr1ptt0r-ransomware-targets-embedded-systems-infects-d-link-nas-gear/

Threats to users of adult websites in 2018
https://securelist.com/threats-to-users-of-adult-websites-in-2018/89634/

CERT-SE i veckan

Allvarlig säkerhetsbrist i WordPress

Kritisk sårbarhet i Drupal

Allvarliga sårbarheter i Cisco-produkter

Angående den så kallade 1177-läckan