VECKOBREV
Blandade nyheter från veckan som gått. Denna förkortade arbetsvecka har präglats i hög grad av den uppmärksammade bakdörren i XZ Utils.
Vi vill också tipsa om MSB:s kommande Forum för samhällsviktiga kommunikationstjänster där CERT-SE medverkar på temat incidenthantering. Läs mer på MSB:s webbplats:https://www.msb.se/sv/aktuellt/kalender/2024/april/forum-for-samhallsviktiga-kommunikationstjanster/
Nyheter i veckan
Ivanti-linked breach of CISA potentially affected more than 100,000 individuals (29 mar)https://cyberscoop.com/ivanti-linked-breach-of-cisa-potentially-affected-more-than-100000-individuals/
AT&T confirms data for 73 million customers leaked on hacker forum (30 mar)https://www.bleepingcomputer.com/news/security/atandt-confirms-data-for-73-million-customers-leaked-on-hacker-forum/…
https://about.att.com/story/2024/addressing-data-set-released-on-dark-web.html
Känsliga svenska internetkablar ligger oskyddade på havsbotten (30 mar)https://www.svt.se/nyheter/inrikes/kansliga-svenska-internetkablar-ligger-oskyddade-pa-havsbotten
Svenska politiker utsatta för kinesisk hackerattack (31 mar)https://www.svt.se/nyheter/utrikes/svenska-politiker-utsatta-for-kinesisk-hackerattack
Svenskars routrar utnyttjade av kinesisk hackergrupp (1 apr)https://www.svt.se/nyheter/inrikes/svenskars-routrar-har-utnyttjats-av-kinesisk-hackergrupp
Prudential Insurance says data of 36,000 exposed during February cyberattack (2 apr)https://therecord.media/prudential-discloses-new-information-from-february-incident
Microsoft warns Gmail blocks some Outlook email as spam, shares fix (2 apr)https://www.bleepingcomputer.com/news/microsoft/microsoft-warns-gmail-blocks-some-outlook-email-as-spam-shares-fix/
US State Department investigates alleged theft of government data (3 apr)https://www.bleepingcomputer.com/news/security/us-state-department-investigates-alleged-theft-of-government-data/
Cyber Safety Review Board Report Slams Microsoft Security Failures in Government Email Breach (3 apr)https://www.infosecurity-magazine.com/news/microsoft-security-failures/
XZ Utils Backdoor Attack Brings Another Similar Incident to Light (3 apr)https://www.securityweek.com/xz-utils-backdoor-attack-brings-another-similar-incident-to-light/
Cyberattack Causes Disruptions at Omni Hotels (4 apr)https://www.securityweek.com/cyberattack-causes-disruptions-at-omni-hotels/
SEXi Ransomware Desires VMware Hypervisors in Ongoing Campaign (5 apr)https://www.darkreading.com/threat-intelligence/sexi-ransomware-desires-vmware-hypervisors
Rapporter och analyser
Earth Freybug Uses UNAPIMON for Unhooking Critical APIs (2 apr)https://www.trendmicro.com/en_us/research/24/d/earth-freybug.html
New Red Ransomware Group (Red CryptoApp) Exposes Victims on Wall of Shame (4 apr)https://www.hackread.com/red-ransomware-group-red-cryptoapp-wall-of-shame/
Latrodectus: This Spider Bytes Like Ice (4 apr)https://www.proofpoint.com/us/blog/threat-insight/latrodectus-spider-bytes-ice
LockBit Ransomware Takedown Strikes Deep Into Brand’s Viability (4 apr)https://www.darkreading.com/threat-intelligence/lockbit-ransomware-takedown-strikes-brand-viability
Informationssäkerhet och blandat
‘Many-shot jailbreak’: lab reveals how AI safety features can be easily bypassed (3 apr)https://www.theguardian.com/technology/2024/apr/03/many-shot-jailbreaking-ai-artificial-intelligence-safety-features-bypass
NIST Wants Help Digging Out of Its NVD Backlog (2 apr)https://www.darkreading.com/vulnerabilities-threats/nist-needs-help-digging-out-of-its-vulnerability-backlog…https://nvd.nist.gov/general/news/nvd-program-transition-announcement
EU skrotar kritiserat säkerhetskrav för molnjättar (4 apr)https://computersweden.se/article/2080548/eu-skrotar-kritiserat-sakerhetskrav-for-molnjattar.html
Cybersäkerhetskollen 2024 lanserad (3 apr)https://www.msb.se/sv/aktuellt/nyheter/2024/april/cybersakerhetskollen-2024-lanserad/
CERT-SE i veckan
Kritisk sårbarhet i XZ Utils (xz/liblzma) (30 mar)https://www.cert.se/2024/03/kritisk-sarbarhet-i-xz-utils.html
Allvarliga sårbarheter i Ivanti Connect Secure och Ivanti Policy Secure (4 apr)https://www.cert.se/2024/04/allvarliga-sarbarheter-i-ivanti-connect-secure-och-ivanti-policy-secure.html
Allvarlig sårbarhet i Cisco Nexus Dashboard Fabric Controller (5 apr)https://www.cert.se/2024/04/allvarlig-sarbarhet-i-cisco-nexus-dashboard-fabric-controller.html