CERT-SE:s veckobrev v.29

Sommartider hej hej! Här kommer några härliga och somriga lästips från CERT-SE. Trevlig helg!

Nyheter i veckan

PyREBox, a Python Scriptable Reverse Engineering Sandbox
http://blog.talosintelligence.com/2017/07/pyrebox.html

Android Backdoor GhostCtrl can Silently Record Your Audio, Video, and More
https://blog.trendmicro.com/trendlabs-security-intelligence/android-backdoor-ghostctrl-can-silently-record-your-audio-video-and-more/

A hacker stole $31M of Ether — how it happened, and what it means for Ethereum
https://medium.freecodecamp.org/a-hacker-stole-31m-of-ether-how-it-happened-and-what-it-means-for-ethereum-9e5dc29e33ce

Tor Project Opens Bounty Program To All Researchers
https://threatpost.com/tor-project-opens-bounty-program-to-all-researchers/126937/

How I tricked Symantec with a Fake Private Key
https://blog.hboeck.de/archives/888-How-I-tricked-Symantec-with-a-Fake-Private-Key.html

Feds Seize AlphaBay and Hansa Markets in Major Dark-Web Bust
http://thehackernews.com/2017/07/alphabay-hansa-darkweb-markets-seized.html

Remote Code Execution In Source Games
https://oneupsecurity.com/research/remote-code-execution-in-source-games

"Bad Taste" Vulnerability Affects Linux Systems via Malicious Windows MSI Files
https://www.bleepingcomputer.com/news/security/-bad-taste-vulnerability-affects-linux-systems-via-malicious-windows-msi-files/

Malware Targets NAS Devices Via SambaCry Exploit
http://www.securityweek.com/malware-targets-nas-devices-sambacry-exploit

Learning PowerShell: The basics
https://blog.malwarebytes.com/101/how-tos/2017/07/learning-powershell-the-basics/

CERT-SE i veckan

Säkerhetsuppdateringar från Apple

Devil's Ivy. Sårbarhet i gSOAP

Oracle Critical Patch Update

Kritisk sårbarhet i Cisco WebEx