CERT-SE:s veckobrev v.01

Nytt år, och nya veckobrev.
Fram med chipsskålen, nu är det helg!

Nyheter i veckan

Forever 21 Says PoS Systems Exposed Customer Data for 8 Months
https://threatpost.com/forever-21-says-pos-systems-exposed-customer-data-for-8-months/129271/

"Trackmageddon" Vulnerabilities Discovered in (GPS) Location Tracking Services
https://www.bleepingcomputer.com/news/security/-trackmageddon-vulnerabilities-discovered-in-gps-location-tracking-services/

Serial Swatter “SWAuTistic” Bragged He Hit 100 Schools, 10 Homes
https://krebsonsecurity.com/2018/01/serial-swatter-swautistic-bragged-he-hit-100-schools-10-homes/

The Enterprise Imperative: Five Tips for Improving Incident Response
https://securityintelligence.com/the-enterprise-imperative-five-tips-for-improving-incident-response/

Targeted Attacks on Industrial Sector Growing Rapidly
https://www.infosecurity-magazine.com/news/targeted-attacks-on-industrial/

Andromeda Botnet to Die Slow, Painful Death
http://www.securityweek.com/andromeda-botnet-die-slow-painful-death-after-takedown

The Coolest Hacks of 2017
https://www.darkreading.com/threat-intelligence/the-coolest-hacks-of-2017/d/d-id/1330699

Hundreds of GPS Location Tracking Services Leaving User Data Open to Hackers
https://thehackernews.com/2018/01/gps-location-tracking.html

Xerox Alto zero-day: cracking disk password protection on a 45 year old system
http://www.righto.com/2018/01/xerox-alto-zero-day-cracking-disk.html

Stealthy Crypto-Miners Are Slipping Into Web Ads
https://www.infosecurity-magazine.com/news/stealthy-cryptominers-web-ads/

CERT-SE i veckan

Kernel side-channel-attack