Home / Early Warning / Cybersecurity Highlights / Filter / Cybersecurity Highlights
Subscribe to CERTSI - Cybersecurity Highlights RSS

Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.
Post related to: Encryption

68 million Dropbox accounts leaked

08/26/2016
Millions os Dropbox users have been forced to change their password this week. Dropbox has reset  the passwords of those users that had not changed it since 2012, after discovering a dump of...
References: 
vice.com
troyhunt.com
nakedsecurity.sophos.com
blogs.dropbox.com
incibe.es
blogs.dropbox.com
Tags: 
Encryption
Incident
Information leakage
Internet

Three iPhone 0-day used for spyware

08/24/2016
The new version IOS 9.3.5 has fixed three vulnerabilities that until now they have been used by a spyware named Pegasus, apparently created by NSO Group, an Israeli cyber-espionage services...
References: 
citizenlab.org
unaaldia.hispasec.com/
support.apple.com
nytimes.com
wired.com
washingtonpost.com
blog.lookout.com
Tags: 
0day
Apple
Cybercrime
Encryption
Incident
Malware

Hacking group linked to NSA tools leaked online

08/15/2016
A group os hackers called ShadowBrokers have published through Github and Tumblr a bunch of tools and vulnerabilities belonging to Equation group, a cybersecurity group linked to NSA and that were...
References: 
thehackernews.com
theintercept.com
arstechnica.com/
muyseguridad.net
arstechnica.com
tools.cisco.com
blogs.cisco.com
threatpost.com
kb.juniper.net
forums.juniper.net
cisco.com
vice.com
nytimes.com
Tags: 
Cryptocurrency
Cyberespionage
Encryption
Information leakage
Tool
Incident
Internet
Malware

The key to more than 100 M vehicles in danger.

08/11/2016
A group of researchers have managed to clone using software and low cost electronic material the keys to vehicles manufactured by Volkswagen since 1995. Using an Arduino based transceiver it is...
References: 
tecnologia.elpais.com
thehackernews.com
Tags: 
Encryption
Tool

WhatsApp enables end-to-end encryption

04/04/2016
WhatsApp has enabled end-to-end encryption for conversations and pone calls in its latest versions (2.12.556 for Android y 2.16.1 in case of iOS). This encryption will increase security for the...
References: 
whatsapp.com
whispersystems.org
infosecurity-magazine.com
theguardian.com
elconfidencial.com
eldiario.es
Tags: 
Android
Apple
Encryption
Social networks

German hospitals affected by ransomware

02/25/2016
Several German hospitals have been infected with ransomware, which has caused disturbances in the normal operations. In the case of Lukas Hospital on February 10, the operation of the hospital was...
References: 
theregister.co.uk
ticbeat.com
scmagazine.com
dw.com
Tags: 
Encryption
Health
Incident

Poodle: exploiting SSL 3.0

10/14/2014
Published a new attack against the obsolete and unsecured version 3.0 of the SSL cryptographic protocol, called POODLE (Padding Oracle On Downgraded Legacy Encryption). Taking advantage of the...
References: 
openssl.org
googleonlinesecurity.blogspot.com.es
incibe-cert.es
us-cert.gov
tools.cisco.com
Tags: 
Encryption
SSL/TLS
Vulnerability

Pages