CERT-SE:s veckobrev v.19

I väntan på den riktiga våren får vi hålla tillgodo med en värmande laddning av länknyheter.

Trevlig helg önskar CERT-SE!

Nyheter i veckan

Vulnerable Apache Jenkins exploited in the wild
https://isc.sans.edu/diary/Vulnerable+Apache+Jenkins+exploited+in+the+wild/24916

Researcher Finds CSS-Only Method to Track Mouse Movements
https://www.bleepingcomputer.com/news/security/researcher-finds-css-only-method-to-track-mouse-movements/

Så utvecklas ett cybervapen
https://kryptera.se/cybervapen/

Turla LightNeuron: An email too far
https://www.welivesecurity.com/2019/05/07/turla-lightneuron-email-too-far/

Ongoing Credit Card Data Leak
https://blog.netlab.360.com/ongoing-credit-card-data-leak/

ATMitch: New Evidence Spotted In The Wild
https://blog.yoroi.company/research/atmitch-new-evidence-spotted-in-the-wild/

FIN7.5: the infamous cybercrime rig “FIN7” continues its activities
https://securelist.com/fin7-5-the-infamous-cybercrime-rig-fin7-continues-its-activities/90703/

Buckeye: Espionage Outfit Used Equation Group Tools Prior to Shadow Brokers Leak
https://www.symantec.com/blogs/threat-intelligence/buckeye-windows-zero-day-exploit

Crash and Burn :: How to crash a Mirai C2 server & why it works
https://www.ankitanubhav.info/post/crash

How to Communicate Privately in the Age of Digital Policing
https://medium.com/better-humans/how-to-communicate-privately-in-the-age-of-digital-policing-cf78ff2a79a7

Securing satellites: The new space race
https://www.helpnetsecurity.com/2019/05/09/securing-satellites/

Alltid aktuell favorit i repris

Surveillance Self-Defense
https://ssd.eff.org/

Nördhörnan

CSS-Only Chat
https://github.com/kkuchta/css-only-chat

Quantum Computing Expert Explains One Concept in 5 Levels of Difficulty
https://video.wired.com/watch/5-levels-4

CERT-SE i veckan

Kritisk sårbarhet i Cisco ESC