Security CERT Global
- CISA Releases Guidance on Single Sign-On (SSO) Adoption for Small and Medium-Sized Businesses: (SMBs)
- CAREL Boss-Mini
- Westermo L210-F2G
- Yokogawa CENTUM
- CISA Releases Three Industrial Control Systems Advisories
- Vulnérabilité dans Spring Cloud Function (20 juin 2024)
- Multiples vulnérabilités dans SonicWall SonicOS (20 juin 2024)
- Multiples vulnérabilités dans les produits Moxa (20 juin 2024)
- CERT-SE:s veckobrev v.25
- We're trying to cure cancer, why would anyone attack us?
- Cyber Europe tests the EU Cyber Preparedness in the Energy Sector
- JVN: 横河電機製CENTUM CAMSログサーバーにおける不十分なアクセス権設定の脆弱性
- お知らせ:標準から学ぶICSセキュリティ - #7 ICSコンポーネントに対するセキュリティ要件
- JVN: 複数のトレンドマイクロ製品における複数の脆弱性
- JVN: RAD Data Communications製SecFlow-2におけるパストラバーサルの脆弱性
- Multiples vulnérabilités dans les produits Atlassian (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Moodle (19 juin 2024)
- Multiples vulnérabilités dans Google Chrome (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Juniper Secure Analytics (19 juin 2024)
- Multiple vulnerabilities in multiple Trend Micro products
- JVN: Androidアプリ「ZOZOTOWN」におけるアクセス制限不備の脆弱性
- JVN: WordPress用プラグインSiteGuard WP Pluginにおける変更したログインパスが漏えいする脆弱性
- WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page
- "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly
- Weekly Report: GitLabに複数の脆弱性
- Weekly Report: 東芝テック製および沖電気製複合機(MFP)に複数の脆弱性
- Weekly Report: 複数のMozilla製品に脆弱性
- Weekly Report: 複数のマイクロソフト製品に脆弱性
- Weekly Report: IPCOMのWAF機能にサービス運用妨害(DoS)の脆弱性
- Weekly Report: Fortinet製FortiOSにスタックベースのバッファーオーバーフローの脆弱性
- Kritiska sårbarheter påverkar VMware vCenter Server
- Multiples vulnérabilités dans les produits VMware (18 juin 2024)
- CISA Releases One Industrial Control Systems Advisory
- PoC-udnyttelse tilgængelig for fejl i Ivanti Endpoint Manager
- TZCERT-SU-24-0632 (SUSE Security Update)
- TZCERT-SU-24-0636 (Chrome Security Update)
- TZCERT-SU-24-0630 (Dell Security Update)
- TZCERT-SU-24-0635 (Microsoft Security Update)
- TZCERT-SU-24-0637 (Mageia Security Update)
- TZCERT-SU-24-0638 (Palo Alto Security Update)
- TZCERT-SU-24-0633 (Adobe Security Update)
- TZCERT-SU-24-0634 (Oracle Linux Security Update)
- TZCERT-SU-24-0631 (Mozilla Security Update)
- TZCERT-SU-24-0639 (Cisco Security Update)
- VMware advarer om to kritiske vCenter-fejl
- Ny Linux malware styres gennem emojis
- Multiple vulnerabilities in Ricoh Streamline NX PC Client
- Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
MGS+ ICS Security Report July 2017
MG Strategy+ ICS Security Report July 2017: Editor Picks: News Intelligence Alerts Reports
Power plant cyber threat: Lock up your ICSs and SCADAs
Nuclear power stations have been told to tighten their defences after government officials warned of a “credible” cyber threat.
Source: https://www.theregister.co.uk/2017/04/03/power_plant_cyber_threat_warning/?mt=1501259950556
AI for Security: The Ghost in the Machine (Learning)
In order to fully understand the impact of a breach, the detection of malware threats needs to be complemented by the proactive exploration of anomalous network behavior and inter-artifact relationships. This activity is supported by machine learning techniques, which can be leveraged to aggregate and classify events at an unprecedented scale.
Source: http://www.bankinfosecurity.com/webinars/ai-for-security-ghost-in-machine-learning-w-1255#.WRJKIVv99lI.twitter
Hackers Ran Through Holes in Swift’s Network
Payment-transfer network left banks largely responsible for their own cyberdefense; old passwords at Bangladesh’s central bank
Source: https://www.wsj.com/articles/hackers-ran-through-holes-in-swifts-network-1493575442
Cybersecurity of nuclear reactors
The potential for remotely turning reactors into weapons is independent of their country of origin.
Source: http://www.controlglobal.com/articles/2017/cybersecurity-of-nuclear-reactors/
The Maturation of Cybercrime
Also, Understanding the Intel Active Management Technology Flaw
Source: http://www.bankinfosecurity.com/interviews/maturation-cybercrime-i-3576#.WRJKa0EhyOo.twitter
Cybercriminals Are Building an Army of Things Creating a Tipping Point for Cybersecurity
Cybercrime is big business, and is growing at an exponential rate. British insurer Lloyd’s of London estimated the cybercrime market at $400 Billion in 2015. Today, just two years later, the World Economic Forum estimates that the total economic cost of cybercrime to currently be $3 trillion. And Cybersecurity Ventures is predicting that cybercrime will cost the world in excess of $6 trillion annually by 2021.
Source: http://blog.fortinet.com/2017/03/28/fortinet-q416-threat-landscape-report
The Department of Defense network of the future
Military operations today are characterized by complexity.
It’s impossible to know the location or underlying mission of the country’s next deployment, and nothing on the horizon suggests the future will be any less complex.
Source: https://networkingexchangeblog.att.com/business/department-defense-network-future/?bref=mbar-twitter#
Cybersecurity Threat Insights from the Eye of the Storm
Our experts dive into the fundamental security challenges organizations face in an ever-evolving threat landscape
Source: https://www.secureworks.com/blog/cybersecurity-threat-insights-from-the-eye-of-the-storm
Blockchain and Financial System Impact
Blockchain is a technology that basically distributes a ledger. For those of you in the financial management world, you know a ledger as the trusted source of transactions or facts. The same is true with blockchain. But instead of existing in a large leather bound tome or in a financial management application, blockchains are managed by a distributed set of computing resources working together to maintain that ledger.
Source: http://blog.fortinet.com/2017/03/17/blockchain-and-financial-system-impact
Israeli companies are going to set up a Latin American cyber-defense center
A group of Israeli companies led by state-owned defence contractor Israel Aerospace Industry (IAI) has won a deal worth tens of millions of dollars to establish a national cyber centre in an unnamed Latin American country.
Source: http://www.businessinsider.com/r-israeli-companies-to-set-up-latin-american-cyber-defence-centre-2017-3