CERT-SE:s veckobrev v.44

Denna halvdag bjuder på ett helt veckobrev.
Trevlig helg önskar vi på CERT-SE

Nyheter i veckan

Necurs Botnet Distributing Sextortion Email Scams
https://www.bleepingcomputer.com/news/security/necurs-botnet-distributing-sextortion-email-scams/

This is how hackers can take down our critical energy systems through the Internet
https://www.zdnet.com/article/this-is-how-hackers-can-take-down-our-core-water-energy-systems/

The Illustrated TLS Connection
https://tls.ulfheim.net/

iPhones are Allergic to Helium
https://ifixit.org/blog/11986/iphones-are-allergic-to-helium/

Proper Disposal of Electronic Devices
https://www.us-cert.gov/ncas/tips/ST18-005

New DemonBot Botnet Pulls the YARN in Hadoop Servers
https://www.bleepingcomputer.com/news/security/new-demonbot-botnet-pulls-the-yarn-in-hadoop-servers/

IBM Buys "Red Hat" Open-Source Software Company for $34 Billion
https://thehackernews.com/2018/10/ibm-redhat-tech-acquisition.html

FIFA was hacked again, this is the second hack in a year
https://securityaffairs.co/wordpress/77591/data-breach/fifa-second-hack.html

What is WPA3? Wi-Fi security protocol strengthens connections
https://www.networkworld.com/article/3316567/mobile-wireless/what-is-wpa3-wi-fi-security-protocol-strengthens-connections.html

sLoad and Ramnit pairing in sustained campaigns against UK and Italy
https://www.proofpoint.com/us/threat-insight/post/sload-and-ramnit-pairing-sustained-campaigns-against-uk-and-italy

Giant ransomware bundle threatens to make malware attacks easier for crooks
https://www.zdnet.com/article/giant-ransomware-bundle-threatens-to-make-malware-attacks-easier-for-crooks/

Bleedingbit zero-day chip flaws may expose majority of enterprises to remote code execution attacks
https://www.zdnet.com/article/new-bleedingbit-zero-day-vulnerabilities-impact-majority-of-enterprises-at-the-chip-level/

Firefox 63 Lets Users Block Tracking Cookies
https://blog.mozilla.org/security/2018/10/23/firefox-63-lets-users-block-tracking-cookies/

Facebook Fined £500,000 for Cambridge Analytica Data Scandal
https://thehackernews.com/2018/10/facebook-cambridge-analytica.html

Windows Built-in Antivirus Gets Secure Sandbox Mode – Turn It ON
https://thehackernews.com/2018/10/windows-defender-antivirus-sandbox.html

Mutually Agreed Norms for Routing Security
https://www.manrs.org/

CERT-SE i veckan

DemonBot

Säkerhetsuppdateringar från Apple

Sårbarhet i X.org X Server