Home / Early Warning / Cybersecurity Highlights / Filter / Cybersecurity Highlights
Subscribe to INCIBE-CERT - Cybersecurity Highlights RSS

Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.
Post related to: Tool

Europol operation disrupts iSpoof

11/24/2022
iSpoof, a tool offered to cybercriminals to enable them to carry out their phishing activity, has been dismantled in a global operation, led by the London Metropolitan Police with the support of...
References: 
europol.europa.eu
bleepingcomputer.com
genbeta.com
thehackernews.com
Tags: 
Cybercrime
Information leakage
Internet
Tool

IconBurst attack offers malicious versions of NPM packages

07/05/2022
Researchers at ReversingLabs have reported an attack on the NPM supply chain dating back to December 2021, in which dozens of malicious NPM modules containing obfuscated JavaScript code were used...
References: 
bleepingcomputer.com
thehackernews.com
blog.malwarebytes.com
unaaldia.hispasec.com
Tags: 
Cybercrime
Malware
Tool

Cryptographic flaw in ECDSA implementation in Java

04/19/2022
The Elliptic Curve Digital Signature Algorithm (ECDSA), used in Java and Oracle to digitally sign messages and data to verify the authenticity and integrity of content, is vulnerable due to a...
References: 
neilmadden.blog
unaaldia.hispasec.com
media.cert.europa.eu
jfrog.com
blog.ehcgroup.io
nakedsecurity.sophos.com
thehackernews.com
Tags: 
Encryption
Tool
Vulnerability

INCONTROLLER/PIPEDREAM malware targeting ICS/SCADA devices

04/13/2022
Several government agencies (DOE, CISA, NSA, and FBI) have issued a joint security advisory to warn about an APT threat, called INCONTROLLER/PIPEDREAM, which has been developed to attack industrial...
References: 
mandiant.com
dragos.com
dragos.com
wired.com
cisa.gov
computerweekly.com
techtarget.com
securityweek.com
reuters.com
incibe-cert.es
Tags: 
APT
Cybercrime
Incident
Industrial Control System
Internet
Malware
Other critical infrastructures
Tool
Windows

Pages