VECKOBREV
Blandade nyheter från veckan.
Nyheter i veckan
Driftstörningar hos Telenor orsakade problem att ringa SOS (22 mar)https://sverigesradio.se/artikel/driftstorningar-hos-telenor-orsakade-problem-att-ringa-sos
German Police Seize ‘Nemesis Market’ in Major International Darknet Raid (24 mar)https://thehackernews.com/2024/03/german-police-seize-nemesis-market-in.html
Key Lesson from Microsoft’s Password Spray Hack: Secure Every Account (25 mar)https://thehackernews.com/2024/03/key-lesson-from-microsofts-password.html
Tech trade union confirms cyberattack behind IT, email outage (25 mar)https://www.theregister.com/2024/03/25/cwu_security_incident/?td=rt-3a
CISA urges software devs to weed out SQL injection vulnerabilities (25 mar)https://www.bleepingcomputer.com/news/security/cisa-urges-software-devs-to-weed-out-sql-injection-vulnerabilities/..https://www.cisa.gov/resources-tools/resources/secure-design-alert-eliminating-sql-injection-vulnerabilities-software
Over 170K users caught up in poisoned Python package ruse (25 mar)https://www.theregister.com/2024/03/25/python_package_malware/
HKScan targeted in cybersecurity attack (25 mar)https://www.wattagnet.com/regions/europe/article/15667131/hkscan-targeted-in-cybersecurity-attack..https://www.hkscan.com/en/newsroom/news/2024/03/information-security-release-c4780757/
New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts (25 mar)https://www.bleepingcomputer.com/news/security/new-mfa-bypassing-phishing-kit-targets-microsoft-365-gmail-accounts/
New MFA-bypassing phishing kit targets Microsoft 365, Gmail accounts (25 mar)https://www.bleepingcomputer.com/news/security/new-mfa-bypassing-phishing-kit-targets-microsoft-365-gmail-accounts/
US sanctions APT31 hackers behind critical infrastructure attacks (25 mar)https://www.bleepingcomputer.com/news/security/us-sanctions-apt31-hackers-behind-critical-infrastructure-attacks/
EU Commission launches probes into Alphabet, Apple, Meta for anticompetitive behavior (25 mar)https://www.euractiv.com/section/platforms/news/eu-commission-launches-investigations-into-alphabet-apple-meta-for-anticompetitive-behavior/
Senator demands answers from HHS about $7.5 million cyber theft in 2023 (25 mar)https://therecord.media/hhs-reported-grant-payment-scam-sen-bill-cassidy-letter
China cyber-attacks explained: who is behind the hacking operation against the US and UK? (26 mar)https://www.theguardian.com/technology/2024/mar/26/china-cyber-attack-uk-us-explained-hack-apt-31
ZenHammer Attack Targets DRAM on Systems With AMD CPUs (26 mar)https://www.securityweek.com/zenhammer-attack-targets-dram-on-systems-with-amd-cpus/
Germany warns of 17K vulnerable Microsoft Exchange servers exposed online (26 mar)https://www.bleepingcomputer.com/news/security/germany-warns-of-17k-vulnerable-microsoft-exchange-servers-exposed-online/
China cyber-attacks explained: who is behind the hacking operation against the US and UK? (26 mar)https://www.theguardian.com/technology/2024/mar/26/china-cyber-attack-uk-us-explained-hack-apt-31
Tolv års handlingar oläsliga efter ransomware-attacken mot Kalmar (26 mar)https://computersweden.se/article/2074799/tolv-ars-handlingar-olasliga-efter-ransomwareattacken-mot-kalmar.html
Investigation into hacking of Parliament’s information systems has been ongoing (26 mar)https://poliisi.fi/en/-/investigation-into-hacking-of-parliament-s-information-systems-has-been-ongoing
Recent ‘MFA Bombing’ Attacks Targeting Apple Users (26 mar)https://krebsonsecurity.com/2024/03/recent-mfa-bombing-attacks-targeting-apple-users/
Researchers Discover 40,000-Strong EOL Router, IoT Botnet (26 mar)https://www.securityweek.com/researchers-discover-40000-strong-eol-router-iot-botnet/
Zero-days exploited in the wild jumped 50% in 2023, fueled by spyware vendors (27 mar)https://therecord.media/zero-day-exploits-jumped-in-2023-spyware
92% of IT Leaders Say Cyberthreats Are on the Rise, 51% See AI Attacks for the First Time (27 mar)https://www.thefastmode.com/market-trends/35466-92-of-it-leaders-say-cyberthreats-are-on-the-rise-51-see-ai-attacks-for-the-first-time
Foresight Cybersecurity Threats For 2030 – Update 2024: Executive Summary (27 mar)https://www.enisa.europa.eu/publications/foresight-cybersecurity-threats-for-2030-update-2024-executive-summary
New Cyber Threats to Challenge Financial Services Sector in 2024 (27 mar)https://www.darkreading.com/cyberattacks-data-breaches/new-cyber-threats-to-challenge-financial-services-sector-in-2024..https://www.fsisac.com/navigatingcyber2024?utm_campaign=2024-GIOReport
Informationssäkerhet och blandat
NIST Launches Cybersecurity Framework (CSF) 2.0 (20 mar)https://www.trendmicro.com/en_us/research/24/c/nist-cybersecurity-framework-2024.html
Hardware-level Apple Silicon vulnerability can leak cryptographic keys (22 mar)https://www.theregister.com/AMP/2024/03/22/hardwarelevel_apple_silicon_vulnerability_can/
The UK Digital Information Bill: Brexit dividend or data disaster? (25 mar)https://www.theregister.com/2024/03/25/uk_digital_information_bill_feature/?td=keepreading
The state of ransomware: Faster, smarter, and meaner (25 mar)https://www.csoonline.com/article/2069830/the-state-of-ransomware.html/amp/
Data Security Trends: 2024 Report Analysis (25 mar)https://securityboulevard.com/2024/03/data-security-trends-2024-report-analysis/.. 2024 Thales Data Threat Report Reveals Rise in Ransomware Attacks, as Compliance Failings Leave Businesses Vulnerable to Breacheshttps://www.thalesgroup.com/en/worldwide/security/press_release/2024-thales-data-threat-report-reveals-rise-ransomware-attacks
”It-skandalen förstörde människors liv” (25 mar)https://computersweden.se/article/2073623/it-skandalen-forstorde-manniskors-liv.html
Officials plan for new age of cyber threats to satellites (25 mar)https://www.politico.com/news/2024/03/25/satellite-cyber-threat-00148672
Finnish police linked APT31 to the 2021 parliament attack (27 mar)https://securityaffairs.com/161102/apt/finnish-police-linked-apt31-to-the-2021-parliament-attack.html
CERT-SE i veckan
Kritiska sårbarheter i FortiOS, FortiProxy och FortiClientEMS (13 mars) (Uppdaterad)https://www.cert.se/2024/03/kritiska-sarbarheter-i-fortios-och-fortiproxy.html