Home / Early Warning / Cybersecurity Highlights / Filter / Cybersecurity Highlights
Subscribe to INCIBE-CERT - Cybersecurity Highlights RSS

Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.
Post related to: Tool

Cryptographic flaw in ECDSA implementation in Java

04/19/2022
The Elliptic Curve Digital Signature Algorithm (ECDSA), used in Java and Oracle to digitally sign messages and data to verify the authenticity and integrity of content, is vulnerable due to a...
References: 
neilmadden.blog
unaaldia.hispasec.com
media.cert.europa.eu
jfrog.com
blog.ehcgroup.io
nakedsecurity.sophos.com
thehackernews.com
Tags: 
Encryption
Tool
Vulnerability

INCONTROLLER/PIPEDREAM malware targeting ICS/SCADA devices

04/13/2022
Several government agencies (DOE, CISA, NSA, and FBI) have issued a joint security advisory to warn about an APT threat, called INCONTROLLER/PIPEDREAM, which has been developed to attack industrial...
References: 
mandiant.com
dragos.com
dragos.com
wired.com
cisa.gov
computerweekly.com
techtarget.com
securityweek.com
reuters.com
incibe-cert.es
Tags: 
APT
Cybercrime
Incident
Industrial Control System
Internet
Malware
Other critical infrastructures
Tool
Windows

Europol disrupts VPNLab.net

01/18/2022
Europol, in a coordinated action with several European countries and the United States, has seized or disrupted 15 servers hosting the VPNLab.net service, a VPN service provider that was being used...
References: 
europol.europa.eu
welivesecurity.com
genbeta.com
theregister.com
Tags: 
Cybercrime
Encryption
Internet
Malware
Tool

Data Breach in Aruba Central

11/11/2021
HPE has reported the data repositories of its Aruba Central network monitoring platform were compromised, allowing an attacker to access data collected on monitored devices and their locations for...
References: 
arubanetworks.com
computerweekly.com
bleepingcomputer.com
Tags: 
Cybercrime
Information leakage
Internet
Tool

Pages