CERT-SE:s veckobrev v.5

I veckan har Cyber Challenge gått av stapeln, en årligen återkommande cybersäkerhetstävling som arrangeras av Försvarshögskolan i samarbete med Nationellt cybersäkerhetscenter. CERT-SE önskar stort grattis till det vinnande laget ReSyst!

Nyheter i veckan

Detta vet vi: Hackerattacken mot Tietoevry (26 jan) https://www.dn.se/sverige/detta-vet-vi-hackerattacken-mot-tietoevry/

Microsoft reveals how hackers breached its Exchange Online accounts (26 jan) https://www.bleepingcomputer.com/news/security/microsoft-reveals-how-hackers-breached-its-exchange-online-accounts/ …
Nu berättar Microsoft hur ryska hackare kom åt chefernas mejlkonton (29 jan) https://computersweden.idg.se/2.2683/1.780853/microsoft-avslojar-hur-ryska-hackare-kom-at-deras-mejlkonton

How a mistakenly published password exposed Mercedes-Benz source code (26 jan) https://techcrunch.com/2024/01/26/mercedez-benz-token-exposed-source-code-github/?guccounter=1

ATG utsatta för DDoS-attack (28 jan) https://www.aftonbladet.se/sportbladet/a/rlwQGR/atg-utsatta-for-ddos-attack

Akira Ransomware and exploitation of Cisco Anyconnect vulnerability CVE-2020-3259 (29 jan) https://www.truesec.com/hub/blog/akira-ransomware-and-exploitation-of-cisco-anyconnect-vulnerability-cve-2020-3259

Företag oroade att information läcks i AI-tjänster – hälften har haft incidenter (29 jan) https://computersweden.idg.se/2.2683/1.780848/foretag-oroade-att-information-lacks-i-ai-tjanster-halften-har-haft-incidenter

Energy giant Schneider Electric hit by Cactus ransomware attack (29 jan) https://www.bleepingcomputer.com/news/security/energy-giant-schneider-electric-hit-by-cactus-ransomware-attack/

Evolution of UNC4990: Uncovering USB Malware’s Hidden Depths (30 jan) https://www.mandiant.com/resources/blog/unc4990-evolution-usb-malware

Johnson Controls says ransomware attack cost $27 million, data stolen (31 jan) https://www.bleepingcomputer.com/news/security/johnson-controls-says-ransomware-attack-cost-27-million-data-stolen/

More than 1 in 4 Organizations Banned Use of GenAI Over Privacy and Data Security Risks (31 jan) https://newsroom.cisco.com/c/r/newsroom/en/us/a/y2024/m01/organizations-ban-use-of-generative-ai-over-data-privacy-security-cisco-study.html

Chinese malware removed from SOHO routers after FBI issues covert commands (1 feb) https://arstechnica.com/security/2024/01/chinese-malware-removed-from-soho-routers-after-fbi-issues-covert-commands/

Cloudflare hacked using auth tokens stolen in Okta attack (1 feb) https://www.bleepingcomputer.com/news/security/cloudflare-hacked-using-auth-tokens-stolen-in-okta-attack/

Informationssäkerhet och blandat

Utredning föreslår operativ krishantering vid cyberattacker och andra allvarliga driftsstörningar i betalningssystemet (26 jan) https://www.aktuellsakerhet.se/utredning-foreslar-operativ-krishantering-vid-cyberattacker-och-andra-allvarliga-driftsstorningar-i-betalningssystemet/

Ransomware payments drop to record low as victims refuse to pay (29 jan) https://www.bleepingcomputer.com/news/security/ransomware-payments-drop-to-record-low-as-victims-refuse-to-pay/

Ermac malware: The other side of the code (29 jan) https://securityintelligence.com/posts/ermac-malware-the-other-side-of-the-code/

Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours (29 jan) https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/

Värst att förlora finansiell information eller personaldata vid dataintrång (30 jan) https://computersweden.idg.se/2.2683/1.780852/varst-att-forlora-finansiell-information-eller-personaldata-vid-dataintrang

Därför har mjukvaror sårbarheter (30 jan) https://www.foi.se/nyheter-och-press/nyheter/2024-01-30-darfor-har-mjukvaror-sarbarheter.html

US Lawmakers Introduce Farm and Food Cybersecurity Act (30 jan) https://www.securityweek.com/us-lawmakers-introduce-farm-and-food-cybersecurity-act/

An EU Prime! EU adopts first Cybersecurity Certification Scheme (31 jan) https://www.enisa.europa.eu/news/an-eu-prime-eu-adopts-first-cybersecurity-certification-scheme

Rekordstort intresse för Cyber Challenge (2 feb) https://www.fhs.se/arkiv/nyhetsarkiv/2024/2024-02-02-rekordstort-intresse-for-cyber-challenge.html

CERT-SE i veckan

Sårbarheter i Linuxkomponenten glibc (31 jan) https://cert.se/2024/01/sarbarheter-i-linuxkomponent.html

Uppdaterade publiceringar

Kritisk sårbarhet i Jenkins (1 feb) https://cert.se/2024/01/kritisk-sarbarhet-i-Jenkins.html

Kritisk sårbarhet i Gitlab (1 feb) https://cert.se/2024/01/kritisk-sarbarhet-i-Gitlab.html

Kritiska sårbarheter i Ivanti Connect Secure och Policy Secure (2 feb) https://cert.se/2024/01/kritiska-sarbarheter-i-ivanti-connect-secure-och-policy-secure.html