CERT-SE:s veckobrev v.29

Vi önskar alla en välbehövlig rotblöta till helgen.

Nyheter i veckan

Everybody and their mother is blocking ads, so why aren’t you?
https://blog.malwarebytes.com/security-world/privacy-security-world/2018/07/mother-is-blocking-ads-so-why-arent-you/

How to block ads like a pro
https://blog.malwarebytes.com/security-world/2018/07/how-to-block-ads-like-a-pro/

Pi-hole®: A black hole for Internet advertisements
https://pi-hole.net/

Pentester’s Windows NTFS Tricks Collection
https://www.sec-consult.com/en/blog/2018/06/pentesters-windows-ntfs-tricks-collection/

IT Security Guidelines for Mobile Apps
https://www.ncsc.nl/english/current-topics/factsheets/it-security-guidelines-for-mobile-apps.html

EU Fines Google Record $5 Billion in Android Antitrust Case
https://thehackernews.com/2018/07/google-android-antitrust-fine.html

Droppers Is How Android Malware Keeps Sneaking Into the Play Store
https://www.bleepingcomputer.com/news/security/droppers-is-how-android-malware-keeps-sneaking-into-the-play-store/

Malwarebytes - Cybercrime tactics & techniques Q2 2018
https://resources.malwarebytes.com/files/2018/07/Malwarebytes_Cybercrime-Tactics-and-Techniques-Q2-2018.pdf

Microsoft Offers $100,000 in New Identity Bug Bounty Program
https://www.securityweek.com/microsoft-offers-100000-new-identity-bug-bounty-program

Personal info of 1.5m SingHealth patients, including PM Lee, stolen in Singapore's most serious cyber attack
https://www.straitstimes.com/singapore/personal-info-of-15m-singhealth-patients-including-pm-lee-stolen-in-singapores-most

Introducing the ASan Nightly Project
https://blog.mozilla.org/security/2018/07/19/introducing-the-asan-nightly-project/

Router Crapfest: Malware Author Builds 18,000-Strong Botnet in a Day
https://www.bleepingcomputer.com/news/security/router-crapfest-malware-author-builds-18-000-strong-botnet-in-a-day/

GandCrab: The New King of Ransomware?
https://www.securityweek.com/grandcrab-new-king-ransomware

Google Cloud Networking Incident #18012
https://status.cloud.google.com/incident/cloud-networking/18012?m=1

Google User Content CDN Used for Malware Hosting
https://www.bleepingcomputer.com/news/security/google-user-content-cdn-used-for-malware-hosting/

Croatian Information System Security Bureau's Jeopardy-style CTF platform
https://ctf.zsis.hr/

A deep dive down the Vermin RAThole
https://www.welivesecurity.com/2018/07/17/deep-dive-vermin-rathole/

CERT-SE i veckan

Kritiska sårbarheter i Cisco-produkter

Oracle Critical Patch Update