CERT-SE:s veckobrev v.52

Veckan gick fort och året likaså.
CERT-SE önskar dig ett gott slut på 2017 och ett gott nytt 2018!

Nyheter i veckan

34c3 - ccc 2017
https://media.ccc.de/c/34c3

The Need for Better Built-in Security in IoT Devices
http://blog.trendmicro.com/trendlabs-security-intelligence/iot-devices-need-better-builtin-security/

FBI Software For Analyzing Fingerprints Contains Russian-Made Code, Whistleblowers Say
https://www.buzzfeed.com/chrishamby/fbi-software-contains-russian-made-code-that-could-open-a

Acoustic Attacks on HDDs Can Sabotage PCs, CCTV Systems, ATMs, More
https://www.bleepingcomputer.com/news/security/acoustic-attacks-on-hdds-can-sabotage-pcs-cctv-systems-atms-more/

Industry Reactions to U.S. Blaming North Korea for WannaCry
http://www.securityweek.com/industry-reactions-us-blaming-north-korea-wannacry

Two Romanians Charged With Hacking Police CCTV Cameras Before Trump Inauguration
https://thehackernews.com/2017/12/police-camera-hacking.html

Code Used in Zero Day Huawei Router Attack Made Public
https://threatpost.com/code-used-in-zero-day-huawei-router-attack-made-public/129260/

The State of Web Application Vulnerabilities in 2017
https://www.imperva.com/blog/2017/12/the-state-of-web-application-vulnerabilities-in-2017/

Cracking encrypted pdfs
https://blog.didierstevens.com/2017/12/26/cracking-encrypted-pdfs-part-1/