CERT-SE:s veckobrev v.48

Ännu en mörk höstvecka är till ända och vi på CERT-SE önskar er en välsigned vintrig adventshelg.

Nyheter i veckan

Contract for the Web - A global plan of action to make our online world safe and empowering for everyone (nov)
https://contractfortheweb.org/

Global Mobile VPN Report 2019 (18 nov)
https://www.top10vpn.com/global-mobile-vpn-report/

Referral Action Day against Islamic State online terrorist propaganda (22 nov)
https://www.europol.europa.eu/newsroom/news/referral-action-day-against-islamic-state-online-terrorist-propaganda

VNC vulnerability research (22 nov)
https://ics-cert.kaspersky.com/reports/2019/11/22/vnc-vulnerability-research/

DN Debatt. "Sveriges digitala suveränitet hotas av it-tjänster i molnet" (22 nov)
https://www.dn.se/debatt/sveriges-digitala-suveranitet-hotas-av-it-tjanster-i-molnet/

Trickbot Updates Password Grabber Module (22 nov)
https://unit42.paloaltonetworks.com/trickbot-updates-password-grabber-module/

TrickBooster - A Deeper Dive into the Malware that Successfully Harvested Over 250M Addresses (22 nov)
https://www.deepinstinct.com/2019/07/22/trickbooster-a-deeper-dive-into-the-malware-that-successfully-harvested-over-250m-addresses/

TrickBot Trojan Getting Ready to Steal OpenSSH and OpenVPN Keys (23 nov)
https://www.bleepingcomputer.com/news/security/trickbot-trojan-getting-ready-to-steal-openssh-and-openvpn-keys/

How to know if you’ve been hacked (25 nov)
https://www.digitaltrends.com/computing/best-websites-for-finding-out-if-youve-been-hacked/

Exploit kits are slowly migrating toward fileless attacks (26 nov)
https://www.zdnet.com/article/exploit-kits-are-slowly-migrating-toward-fileless-attacks/

Finland får säkerhetscertifiering för smarta prylar (26 nov)
https://m3.idg.se/2.1022/1.727132/finland-far-sakerhetscertifiering-for-smarta-prylar

Protecting users from government-backed hacking and disinformation (26 nov)
https://blog.google/technology/safety-security/threat-analysis-group/protecting-users-government-backed-hacking-and-disinformation/

Almost 60% Of Malicious Ads Come from Three Ad Providers (26 nov)
https://www.bleepingcomputer.com/news/security/almost-60-percent-of-malicious-ads-come-from-three-ad-providers/

FFS 2019:9 - Försvarsmaktens föreskrifter om signalskyddstjänsten (27 nov)
https://www.forsvarsmakten.se/siteassets/4-om-myndigheten/dokumentfiler/lagrum/gallande-ffs-2014-/ffs-2019-09.pdf

Dutch Govt Warns of 3 Ransomware Infecting 1,800 Businesses (28 nov)
https://www.bleepingcomputer.com/news/security/dutch-govt-warns-of-3-ransomware-infecting-1-800-businesses/

Polis fälldes för dataintrång (28 nov)
https://sverigesradio.se/sida/artikel.aspx?programid=98&artikel=7356063

NCSC offers shoppers advice ahead of Black Friday online sales rush (29 nov)
https://www.ncsc.gov.uk/news/black-friday-online-sales-advice

IPv6-special

The RIPE NCC has run out of IPv4 Addresses (25 nov)
https://www.ripe.net/publications/news/about-ripe-ncc-and-ripe/the-ripe-ncc-has-run-out-of-ipv4-addresses

Svenska myndigheter med IPv6
https://myndighetermedipv6.se/

Svenska kommuner med IPv6
https://www.kommunermedipv6.se/

Svenska regioner med IPv6
https://dnssecandipv6.se/cipv6/

Test your IPv6 connectivity
http://test-ipv6.se/

IPv6alizer
https://ipv6alizer.se/

IPv6 per country adoption
https://www.google.com/intl/en/ipv6/statistics.html#tab=per-country-ipv6-adoption

CERT-SE i veckan

Viktig firmwareuppdatering till SSD-diskar i hårdvara från HPE