CERT-SE:s veckobrev v.27

Nyheter i veckan

GnuPG crypto library cracked, look for patches
http://www.theregister.co.uk/2017/07/04/gnupg_crypto_library_cracked_look_for_patches/

Google ships WannaCrypt for Android, disguised as Samba app
https://www.theregister.co.uk/2017/07/07/google_ships_wannacrypt_for_android_disguised_as_samba_app/

SLocker Mobile Ransomware Starts Mimicking WannaCry
http://blog.trendmicro.com/trendlabs-security-intelligence/slocker-mobile-ransomware-starts-mimicking-wannacry/

The key to old Petya versions has been published by the malware author
https://blog.malwarebytes.com/cybercrime/2017/07/the-key-to-the-old-petya-has-been-published-by-the-malware-author/

The MeDoc Connection
http://blog.talosintelligence.com/2017/07/the-medoc-connection.html

All this EternalPetya stuff makes me WannaCry
https://blog.malwarebytes.com/threat-analysis/malware-threat-analysis/2017/07/all-this-eternalpetya-stuff-makes-me-wannacry/

New KONNI Campaign References North Korean Missile Capabilities
http://blog.talosintelligence.com/2017/07/konni-references-north-korean-missile-capabilities.html#more

Fourth largest Bitcoin exchange. Bithumb, hacked for billions of Won
https://bravenewcoin.com/news/fourth-largest-bitcoin-exchange-bithumb-hacked-for-billions-of-won

Majority of Sites Fail Mozilla’s Comprehensive Security Review
https://threatpost.com/majority-of-sites-fail-mozillas-comprehensive-security-review/126646/

How the CopyCat malware infected Android devices around the world
http://blog.checkpoint.com/2017/07/06/how-the-copycat-malware-infected-android-devices-around-the-world/

CERT-SE i veckan

PHP 7.1.7 och 5.6.31 - säkerhetsrelease

Sårbarheter i SNMP i Cisco IOS och IOS XE

Android säkerhetsbulletin - Juli 2017

Kritiska sårbarheter i Cisco Ultra Services Framework

Kritiska sårbarheter i Cisco Elastic Service Controller