CERT-SE:s veckobrev v.50

Ännu en vecka går mot sitt slut. Veckobrevet kommer så ut.

Nyheter i veckan

Improve your online safety with advice from experts
https://securityplanner.org/

Script Recovers Event Logs Doctored by NSA Hacking Tool
https://www.bleepingcomputer.com/news/security/script-recovers-event-logs-doctored-by-nsa-hacking-tool/

How to Enable the Built-In Windows 10 OpenSSH Client
https://www.bleepingcomputer.com/news/microsoft/heres-how-to-enable-the-built-in-windows-10-openssh-client/

How to Install the Built-In Windows 10 OpenSSH Server
https://www.bleepingcomputer.com/news/microsoft/how-to-install-the-built-in-windows-10-openssh-server/

The FCC just killed net neutrality
https://www.theverge.com/2017/12/14/16776154/fcc-net-neutrality-vote-results-rules-repealed

Someone Used Wet String to Get a Broadband Internet Connection
https://motherboard.vice.com/en_us/article/qvzja3/wet-string-broadband-isp-ip-tcp

1.4 Billion Clear Text Credentials Discovered in a Single Database
https://medium.com/4iqdelvedeep/1-4-billion-clear-text-credentials-discovered-in-a-single-database-3131d0a1ae14

Avast open-sources its machine-code decompiler
https://blog.avast.com/avast-open-sources-its-machine-code-decompiler

Lessons learned from a Man-in-the-Middle attack
https://www.fox-it.com/en/insights/blogs/blog/fox-hit-cyber-attack/

Using Gmail with OAUTH2 in Linux and on an ESP8266
https://hackaday.com/2017/12/14/using-gmail-with-oauth2-in-linux-and-on-an-esp8266/

Attackers Deploy New ICS Attack Framework “TRITON” and Cause Operational Disruption to Critical Infrastructure
https://www.fireeye.com/blog/threat-research/2017/12/attackers-deploy-new-ics-attack-framework-triton.html

Chinese Cybercriminals Develop Lucrative Hacking Services
https://securingtomorrow.mcafee.com/mcafee-labs/chinese-cybercriminals-develop-lucrative-hacking-services/

EFF to Court: Accessing Publicly Available Information on the Internet Is Not a Crime
https://www.eff.org/deeplinks/2017/12/eff-court-accessing-publicly-available-information-internet-not-crime

Dissecting PRILEX and CUTLET MAKER ATM Malware Families
http://blog.trendmicro.com/trendlabs-security-intelligence/dissecting-prilex-cutlet-maker-atm-malware-families/

Popular Destinations rerouted to Russia
https://bgpmon.net/popular-destinations-rerouted-to-russia/

Den uppskattade musiksektionen

Bäst just nu
https://julradio.se/

CERT-SE i veckan

ROBOT - Return of Bleichenbacher's Oracle Attack

Microsoft säkerhetsuppdateringar december 2017

RCE i Microsoft Malware Protection Engine - CVE-2017-11937