CERT-SE:s veckobrev v.10
Blandade nyheter från veckan som gått. Vi vill denna vecka också uppmärksamma att anmälan till FRA:s, Säkerhetspolisens och MUSTs CTF-tävling Undutmaning nu är öppen. Se https://www.fra.se/nyheter/nyheter/nyhetsarkiv/news/undutmaningartillbaka.5.766e440918f572e73351da.html.
Trevlig helg önskar CERT-SE!
Nyheter i veckan
Cyberattack detected at Polish space agency, minister says (2 mar) https://www.reuters.com/world/europe/cyberattack-detected-polish-space-agency-minister-says-2025-03-02/
C++ creator calls for help to defend programming language from ‘serious attacks’ (2 mar) https://www.theregister.com/2025/03/02/c_creator_calls_for_action
Black Basta and Cactus Ransomware Groups Add BackConnect Malware to Their Arsenal (3 mar) https://www.trendmicro.com/en_us/research/25/b/black-basta-cactus-ransomware-backconnect.html
Top CVEs & Vulnerabilities February 2025 (3 mar) https://securityboulevard.com/2025/03/top-cves-vulnerabilities-february-2025/
New Microsoft 365 outage impacts Teams, causes call failures (3 mar) https://www.bleepingcomputer.com/news/microsoft/new-microsoft-365-outage-impacts-teams-causes-call-failures/
Phishing Campaign Uses Havoc Framework to Control Infected Systems (3 mar) https://www.infosecurity-magazine.com/news/phishing-campaign-havoc-framework
Försvarsforskaren efter sabotaget: ”Nästan all civil infrastruktur är sårbar” https://www.svt.se/nyheter/lokalt/ost/forsvarsforskaren-efter-sabotaget-nastan-all-civil-infrastruktur-ar-sarbar
Hackers Attacking 4000+ ISPs With New Malware for Remote Access (4 mar) https://cybersecuritynews.com/hackers-attacking-4000-isps/
Tata Technologies Allegedly Breached – Huntress Claim Leak of Sensitive data (4 mar) https://cybersecuritynews.com/hunters-international-allegedly-claims-breach/
GrassCall Malware Attacking Job Seekers To Steal Login Credentials (5 mar) https://cybersecuritynews.com/grasscall-malware-attacking-job-seekers/
Nu börjar ransomware-krav dyka upp som brev på posten – bokstavligt talat (5 mar) https://computersweden.se/article/3839064/nu-borjar-ransomware-krav-dyka-upp-som-brev-pa-posten-bokstavligt-talat.html
Känsliga uppgifter har publicerats – efter attacken mot Sportadmin (5 mar) https://www.svt.se/nyheter/inrikes/kansliga-uppgifter-har-publicerats-efter-attacken-mot-sportadmin
Edimax Camera Zero-Day Disclosed by CISA Exploited by Botnets (7 mar) https://www.securityweek.com/edimax-camera-zero-day-disclosed-by-cisa-exploited-by-botnets/
Rapporter och analyser
A Trusted and Cyber Secure Europe - ENISA Strategy (27 feb) https://www.enisa.europa.eu/publications/a-trusted-and-cyber-secure-europe-enisa-strategy
Web DDoS attacks see major surge as AI allows more powerful attacks (4 mar) https://www.techradar.com/pro/security/web-ddos-attacks-see-major-surge-as-ai-allows-more-powerful-attacks
ENISA NIS360 2024 report: A comprehensive look at cybersecurity maturity and criticality of NIS2 sectors (5 mar) https://www.enisa.europa.eu/news/enisa-nis360-2024-report
Palo Alto Global Incident Response Report 2025 https://www.paloaltonetworks.com/engage/unit42-2025-global-incident-response-report
Informationssäkerhet och blandat
CISA says it will continue to monitor Russian cyber threats (3 mar) https://therecord.media/cisa-says-it-will-continue-to-monitor-russian-cyber-threats
Norska datainspektionen: Ha en exitstrategi för amerikanska molntjänster (4 mar) https://computersweden.se/article/3837345/norska-datainspektionen-ha-en-exitstrategi-for-amerikanska-molntjanster.html
Ten ways to mitigate security risks in healthcare (5 mar) https://www.scworld.com/resource/10-ways-to-mitigate-security-risks-in-healthcare
Överföring av personuppgifter till USA, vad gäller? (5 mar) https://www.imy.se/blogg/overforing-av-personuppgifter-till-usa-vad-galler
Mass federal layoffs will hurt cybersecurity, former top US security official says (6 mar) https://www.reuters.com/technology/cybersecurity/mass-federal-layoffs-will-hurt-cybersecurity-former-top-us-security-official-2025-03-05/
First EU “cyber” Council focusses on crisis management and critical infrastructure security – ministry (6 mar) https://www.delfi.lt/en/politics/first-eu-cyber-council-focusses-on-crisis-management-and-critical-infrastructure-security-ministry-120091549
Vurdering af truslen for påvirkningsvirksomhed fra fremmede stater i forbindelse med valget til Inatsisartut i 2025 https://www.fe-ddis.dk/da/produkter/situations--og-trusselsvurderinger2/trusselsvurderinger/vurdering-af-truslen-for-pavirkningsvirksomhed-fra-fremmede-stater-i-forbindelse-med-valget-til-inatsisartut-i-2025
CERT-SE i veckan
Sårbarheter i VMware-produkter utnyttjas aktivt (5 mar) https://www.cert.se/2025/03/sarbarheter-i-vmware-produkter-utnyttjas-aktivt.html