Home / Early Warning / Cybersecurity Highlights
Subscribe to CERTSI - Cybersecurity Highlights RSS

Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

ASUS tool infected by Operation ShadowHammer

03/25/2019
Kaspersky Lab has discovered a new Advanced Persistent Threat (APT) campaign that has affected more than one million users through an ASUS software supply chain attack. The investigation revealed...
References: 
securelist.com
kaspersky.com
motherboard.vice.com
symantec.com
asus.com
xataka.com
unaaldia.hispasec.com
Tags: 
APT
Malware
Tool
Vulnerability

Facebook accidentally saves passwords in plain text

03/21/2019
Facebook has reported that, by mistake, it has been storing its users' passwords in plain text, although it has not provided details of this failure, it has confirmed that both Facebook and...
References: 
newsroom.fb.com
motherboard.vice.com
genbeta.com
welivesecurity.com
unaaldia.hispasec.com
Tags: 
Incident
Social networks

Elsevier platform credentials exposed

03/18/2019
Mossab Hussein, CSO of cybersecurity company SpiderSilk, has found a bug in Elsevier, a multimedia scientific publishing house. A bad configuration in one of its servers, exposed email addresses...
References: 
motherboard.vice.com
cyware.com
z6mag.com
nakedsecurity.sophos.com
latesthackingnews.com
Tags: 
Incident
Information leakage

Vulnerability found in the Steam gaming platform

03/15/2019
The video game platform Steam, belonging to Valve, allows players to search for game servers through a specific UDP protocol for which a buffer overflow vulnerability has been found. This...
References: 
unaaldia.hispasec.com
hackerone.com
blog.satinfo.es
Tags: 
Vulnerability

Pages