{"id":27410,"date":"2023-07-06T10:58:16","date_gmt":"2023-07-06T08:58:16","guid":{"rendered":"https:\/\/kinit.sk\/security-news-june-2023\/"},"modified":"2023-07-06T11:04:57","modified_gmt":"2023-07-06T09:04:57","slug":"security-news-june-2023","status":"publish","type":"post","link":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/","title":{"rendered":"Security News &#8211; J\u00fan 2023"},"content":{"rendered":"<div id=\"\" class=\"element core-paragraph\">\n<p>Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.&nbsp;<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-heading\">\n<h3 class=\"wp-block-heading\">Politika<\/h3>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.lupa.cz\/clanky\/meli-jsme-pravdu-a-pres-obri-natlak-ciny-jsme-neuhnuli-souboj-o-zakaz-huawei-v-ceskych-siti-jde-do-finale\/\" target=\"_blank\" rel=\"noreferrer noopener\">V \u010cesku sa za\u010dala diskusia<\/a> o implement\u00e1ci\u00ed eur\u00f3pskej smernice NIS2 a o posudzovan\u00ed riz\u00edk dod\u00e1vate\u013esk\u00e9ho re\u0165azca. Z\u00e1kon u\u017e vst\u00fapil do pripomienkov\u00e9ho konania. Cie\u013eom je z\u00edska\u0165 mo\u017enos\u0165 obmedzi\u0165 alebo zak\u00e1za\u0165 dod\u00e1vate\u013eov z nespo\u013eahliv\u00fdch kraj\u00edn.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>V s\u00fa\u010dasnosti <a href=\"https:\/\/www.scmagazine.com\/news\/threat-intelligence\/north-korean-linked-apt-groups-focus-on-financial-gain-intelligence-gathering\" target=\"_blank\" rel=\"noreferrer noopener\">prebiehaj\u00fa dve kampane dvoch r\u00f4znych APT skup\u00edn<\/a> naviazan\u00fdch na Severn\u00fa K\u00f3reu. Jedna z nich sa zameriava na dosiahnutie finan\u010dn\u00e9ho zisku, aby mohla \u010falej financova\u0165 severok\u00f3rejsk\u00fd re\u017eim, na ktor\u00fd s\u00fa uvalen\u00e9 medzin\u00e1rodn\u00e9 sankcie. Druh\u00e1 vyu\u017e\u00edva soci\u00e1lne in\u017einierstvo na z\u00edskanie strategick\u00fdch inform\u00e1ci\u00ed.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/lazarus-hackers-linked-to-the-35-million-atomic-wallet-heist\/\" target=\"_blank\" rel=\"noreferrer noopener\">Severok\u00f3rejsk\u00e1 APT skupina Lazarus bola spojen\u00e1 s \u00fatokom na Atomic Wallet<\/a>. N\u00e1sledkom \u00fatoku bolo odcudzen\u00fdch viac ako 35 mili\u00f3nov dol\u00e1rov. Na zamaskovanie p\u00f4vodu prostriedkov vyu\u017eili \u00fato\u010dn\u00edci r\u00f4zne pe\u0148a\u017eenky, mix\u00e9ry a pr\u00e1\u010dky pe\u0148az\u00ed.\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Spolo\u010dnos\u0165 Mandiant je presved\u010den\u00e1, \u017ee <a href=\"https:\/\/www.scmagazine.com\/news\/vulnerability-management\/mandiant-more-confident-chinese-hackers-were-behind-vmware-hypervisor-malware-campaign\" target=\"_blank\" rel=\"noreferrer noopener\">\u00fato\u010dn\u00e1 kampa\u0148 veden\u00e1 na VMWare hypervisor bola vykonan\u00e1 \u010dinskou kyber\u0161pion\u00e1\u017enou skupinou<\/a>. Zauj\u00edmav\u00e9 je, \u017ee \u00fato\u010dn\u00edci reaguj\u00fa na zverejnen\u00e9 inform\u00e1cie o ich aktivit\u00e1ch a r\u00fdchlo menia svoje zvyklosti (napr\u00edklad zmena mien s\u00faborov a ich hashe).<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ukrainian-hackers-take-down-service-provider-for-russian-banks\/\" target=\"_blank\" rel=\"noreferrer noopener\">Ukrajinsk\u00ed hackeri z Cyber.Anarchy.Squad sa prihl\u00e1sili k \u00faspe\u0161n\u00e9mu \u00fatoku<\/a> na rusk\u00e9ho oper\u00e1tora Infotel JSC. \u00datok sp\u00f4sobil v\u00fdpadok viacer\u00fdch b\u00e1nk a in\u0161tit\u00faci\u00ed, ktor\u00e9 s\u00fa jeho z\u00e1kazn\u00edkmi.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/swiss-government-warns-of-ongoing-ddos-attacks-data-leak\/\" target=\"_blank\" rel=\"noreferrer noopener\">\u0160vaj\u010diarske in\u0161tit\u00facie sa stali ter\u010dom DDoS a ransomware \u00fatoku<\/a> zo strany proruskej skupiny NoName, ktor\u00e1 sa zameriava na krajiny, ktor\u00e9 vo vojne s Ruskom podporuj\u00fa Ukrajinu. Viacer\u00e9 feder\u00e1lne str\u00e1nky zostali nedostupn\u00e9. \u00datok nastal po diskusii o podpore Ukrajiny v parlamente.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/cybernews.com\/news\/putin-martial-law-deepfake-address\/\" target=\"_blank\" rel=\"noreferrer noopener\">Deepfake technol\u00f3gia bola pou\u017eit\u00e1 na napodobnenie rusk\u00e9ho prezidenta<\/a>. V troch rusk\u00fdch regi\u00f3noch bola odvysielan\u00e1 falo\u0161n\u00e1 spr\u00e1va o vyhl\u00e1sen\u00ed v\u00fdnimo\u010dn\u00e9ho stavu z d\u00f4vodu \u00fatoku zo strany Ukrajiny.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-heading\">\n<h3 class=\"wp-block-heading\">Vy\u0161etrovanie a v\u00fdskum<\/h3>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/nsa-and-fbi-kimsuky-hackers-pose-as-journalists-to-steal-intel\/\" target=\"_blank\" rel=\"noreferrer noopener\">APT skupina Kimsuky<\/a>, s napojen\u00edm na Severn\u00fa K\u00f3reu, sa v r\u00e1mci spear-phishingovej kampane vyd\u00e1va za novin\u00e1rov a \u010dlenov akademickej obce. Sna\u017e\u00ed sa tak z\u00edska\u0165 inform\u00e1cie o think tankoch, v\u00fdskumn\u00fdch centr\u00e1ch a in\u00fdch organiz\u00e1ci\u00e1ch. Ve\u013emi dobrou obranou je odolnos\u0165 \u013eud\u00ed vo\u010di phishingu a z\u00e1rove\u0148 viacfaktorov\u00e1 autentifik\u00e1cia.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>FTC (Federal Trade Commission) <a href=\"https:\/\/www.scmagazine.com\/news\/privacy\/amazon-30-8m-alexa-ring-privacy-violations\" target=\"_blank\" rel=\"noreferrer noopener\">pokutoval Amazon<\/a> sumou 30 mili\u00f3nov dol\u00e1rov za poru\u0161enia ochrany s\u00fakromia v produktoch Alexa a Ring. Jedn\u00fdm z poru\u0161en\u00ed bolo bezd\u00f4vodn\u00e9 ukladanie d\u00e1t o de\u0165och a ich nahr\u00e1vok pre svoje vlastn\u00e9 \u00fa\u010dely.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.hackread.com\/russians-mt-gox-bitcoin-heist-btc-e-money-launder\/\" target=\"_blank\" rel=\"noreferrer noopener\">Dvaja rusi boli obvinen\u00ed z kr\u00e1de\u017ee 647 000 Bitcoinov z Mt. Gox<\/a>, \u010do viedlo ku kolapsu tejto burzy. Obom hroz\u00ed pribli\u017ene 20 rokov za mre\u017eami.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.scmagazine.com\/news\/email-security\/gmail-spoofing-google-priority-1-probe\" target=\"_blank\" rel=\"noreferrer noopener\">Google vy\u0161etruje GMail zranite\u013enos\u0165<\/a>, ktor\u00e1 je spojen\u00e1 s Bran Indicators for Message Identification (BIMI). Ke\u010f je mail poslan\u00fd od konkr\u00e9tnej spolo\u010dnosti, t\u00e1to funkcia mu prid\u00e1va verifika\u010dn\u00fd symbol. Zd\u00e1 sa, \u017ee prim\u00e1rnou pr\u00ed\u010dinou tejto zranite\u013enosti je zle nastaven\u00fd SPF a DMARK z\u00e1znam na strane odosielate\u013ea.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/fbi-seizes-breachforums-after-arresting-its-owner-pompompurin-in-march\/\" target=\"_blank\" rel=\"noreferrer noopener\">FBI sa podie\u013eala na odstaven\u00ed hackersk\u00e9ho f\u00f3ra BreachForums<\/a> a zatknut\u00ed jej majite\u013ea, ktor\u00fd je obvinen\u00fd z obchodovania s \u00fadajmi mili\u00f3nov ameri\u010danov a stoviek americk\u00fdch firiem. Patril medzi prominentn\u00fdch \u010dlenov RaidForums a kyberkrimin\u00e1lneho podsvetia.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Kyberkrimin\u00e1lnici sa vo ve\u013ekom <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/the-great-exodus-to-telegram-a-tour-of-the-new-cybercrime-underground\/\" target=\"_blank\" rel=\"noreferrer noopener\">pres\u00favaj\u00fa z darkwebu<\/a> (najm\u00e4 TOR str\u00e1nok) na Telegram. D\u00f4vodom presunu je napr\u00edklad, \u017ee Telegram je r\u00fdchlej\u0161\u00ed, poskytuje im vy\u0161\u0161iu anonymitu a obsahuje mno\u017estvo \u0161pecializovan\u00fdch kan\u00e1lov.\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-heading\">\n<h3 class=\"wp-block-heading\">\u00datoky a \u00faniky inform\u00e1ci\u00ed<\/h3>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Harvard Pilgrim Health Care (USA), neziskov\u00fd poskytovate\u013e zdravotnej starostlivosti, sa stal <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/harvard-pilgrim-health-care-ransomware-attack-hits-25-million-people\/\" target=\"_blank\" rel=\"noreferrer noopener\">ter\u010dom ransomware \u00fatoku<\/a>. V \u00fatoku bolo zasiahnut\u00fdch viac ako 2,5 mili\u00f3na \u013eud\u00ed, ktor\u00fdm ukradli ich osobn\u00e9 \u00fadaje (vr\u00e1tane mien, adries, d\u00e1tumov narodenia a i.).\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Nov\u00e1 s\u00e9ria online podvodov sa zameriava <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/hackers-hijack-legitimate-sites-to-host-credit-card-stealer-scripts\/\" target=\"_blank\" rel=\"noreferrer noopener\">na kr\u00e1de\u017e inform\u00e1ci\u00ed z kreditn\u00fdch kariet<\/a>. Postupuje tak, \u017ee najprv skompromituje etablovan\u00e9 weby, kde n\u00e1sledne nasad\u00ed \u0161kodliv\u00e9 skripty. Zneu\u017e\u00edvaj\u00fa pri tom zn\u00e1me zranite\u013enosti platforiem, ako napr\u00edklad WordPress, Magento, WooCommerce, Shopify a in\u00e9. Podvody tie\u017e vyu\u017e\u00edvaj\u00fa obfusk\u00e1ciu (zahmlievanie zdrojov\u00e9ho k\u00f3du programov), ktor\u00e1 sta\u017euje detekciu \u0161kodliv\u00fdch skriptov aj exfiltr\u00e1ciu d\u00e1t.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/sextortionists-are-making-ai-nudes-from-your-social-media-images\/\" target=\"_blank\" rel=\"noreferrer noopener\">FBI vydala varovanie pred nov\u00fdm typom sexu\u00e1lneho vydierania<\/a> (sextortion). Z vo\u013ene dostupn\u00fdch fotiek a vide\u00ed sa s pomocou AI (deepfake) vygeneruje sexu\u00e1lne explicitn\u00fd obsah, ktor\u00fdm je obe\u0165 vydieran\u00e1. Prevenciou je zdie\u013eanie fotiek a vide\u00ed len \u00fazkemu okruhu \u013eud\u00ed.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Heatmap v aplik\u00e1ci\u00ed Strava <a href=\"https:\/\/cybernews.com\/privacy\/strava-heatmap-might-reveal-your-home-address\/\" target=\"_blank\" rel=\"noreferrer noopener\">umo\u017e\u0148uje zisti\u0165 dom\u00e1cu adresu<\/a> akt\u00edvnych pou\u017e\u00edvate\u013eov. Plat\u00ed to najm\u00e4 pre oblasti s men\u0161\u00edm v\u00fdskytom pou\u017e\u00edvate\u013eov. \u00dato\u010dn\u00edci si z t\u00fdch \u00fadajov vedia vytvori\u0165 profil o pou\u017e\u00edvate\u013eoch. Funkciu je mo\u017en\u00e9 zablokova\u0165.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/cybernews.com\/editorial\/nike-adidas-massive-scam-campaign\/\" target=\"_blank\" rel=\"noreferrer noopener\">Ve\u013ek\u00e9 m\u00f3dne zna\u010dky, napr\u00edklad Puma, Nike, Adidas sa stali ter\u010dom ve\u013ekej podvodnej kampane.<\/a> \u00dato\u010dn\u00edci napodob\u0148uj\u00fa ich webov\u00e9 str\u00e1nky a vyu\u017e\u00edvaj\u00fa pokro\u010dil\u00e9 SEO met\u00f3dy, v\u010faka \u010domu sa ich str\u00e1nky zobrazuj\u00fa na prv\u00fdch miestach. Kampa\u0148 musela by\u0165 vopred napl\u00e1novan\u00e1. Pou\u017e\u00edvatelia takto m\u00f4\u017eu omylom zada\u0165 svoje prihlasovacie \u00fadaje, \u010di \u010d\u00edslo karty.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Po \u00fatoku museli <a href=\"https:\/\/www.govinfosecurity.com\/cyberattack-diverts-patients-from-rural-idaho-hospital-a-22201\" target=\"_blank\" rel=\"noreferrer noopener\">nemocnice vo vidieckej \u010dasti \u0161t\u00e1tu Idaho<\/a> presmerova\u0165 pacientov do in\u00fdch zariaden\u00ed a nemohli vyu\u017e\u00edva\u0165 informa\u010dn\u00e9 syst\u00e9my. Zasiahnut\u00e9 nemocnice spolu s ich partnersk\u00fdmi klinikami poskytuj\u00fa starostlivos\u0165 pre oblas\u0165, kde \u017eije 68 000 obyvate\u013eov.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/university-of-manchester-confirms-data-theft-in-recent-cyberattack\/\" target=\"_blank\" rel=\"noreferrer noopener\">University of Manchester sa stala ter\u010dom \u00fatoku<\/a>, po\u010das ktor\u00e9ho bolo skop\u00edrovan\u00fdch 7TB \u00fadajov. \u00dadaje obsahovali napr. inform\u00e1cie o \u0161tudentoch, absolventoch a zamestnancoch univerzity.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>\u010c\u00ednska APT skupina Mustang Panda stoj\u00ed <a href=\"https:\/\/www.hackread.com\/china-espionage-malware-usb-drives-europe\/\" target=\"_blank\" rel=\"noreferrer noopener\">za \u0161pion\u00e1\u017enou kampa\u0148ou<\/a>, ktor\u00e1 bola zameran\u00e1 na eur\u00f3pske zdravotn\u00edctvo. Na infikovanie a \u0161\u00edrenie vyu\u017e\u00edva USB k\u013e\u00fa\u010de.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.hackread.com\/us-military-unsolicited-smartwatches-data-breach\/\" target=\"_blank\" rel=\"noreferrer noopener\">Americk\u00fd vojensk\u00fd person\u00e1l sa stal ter\u010dom \u00fatoku<\/a>. Zamestnancom niekto posielal do ich po\u0161tov\u00fdch schr\u00e1nok nevy\u017eiadan\u00e9 smart hodinky. Po zapnut\u00ed sa hodinky automaticky pripojili na wifi sie\u0165 a nadviazali neautorizovan\u00e9 spojenie s mobiln\u00fdmi telef\u00f3nmi, \u010do im umo\u017enilo pr\u00edstup k bankov\u00fdm inform\u00e1ci\u00e1m, kontaktom, men\u00e1m a hesl\u00e1m. Odpor\u00fa\u010da sa tieto zariadenia po obdr\u017ean\u00ed v\u00f4bec nezap\u00edna\u0165.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-heading\">\n<h3 class=\"wp-block-heading\">Ostatn\u00e9<\/h3>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Tento mesiac sa <a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-windows-10-21h2-has-reached-end-of-servicing\/\" target=\"_blank\" rel=\"noreferrer noopener\">skon\u010dila podpora pre Windows 10 vo verzii 21H2<\/a> pre verzie Home, Pro, Pro Education a Pro for Workstations. Od bud\u00faceho mesiaca bud\u00fa tieto verzie zranite\u013en\u00e9 &#8211; z aktualiz\u00e1ci\u00ed pre ostatn\u00e9 verzie bude zrejm\u00e9, ak\u00e9 zranite\u013enosti odstra\u0148uj\u00fa. Vo verzii 21H2 tieto zranite\u013enosti v zostan\u00fa.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/microsoft\/microsoft-is-killing-cortana-on-windows-starting-late-2023\/\" target=\"_blank\" rel=\"noreferrer noopener\">Microsoft ozn\u00e1mil stiahnutie AI asistenta &#8211; Cortana<\/a> z opera\u010dn\u00e9ho syst\u00e9mu Windows. Malo by sa tak sta\u0165 koncom tohto roka a nahrad\u00ed ho Windows Copilot. Na\u010falej v\u0161ak bude k dispoz\u00edci\u00ed napr. v Microsoft Teams.\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Z Chrome Web Store bolo odstr\u00e1nen\u00fdch <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/malicious-chrome-extensions-with-75m-installs-removed-from-web-store\/\" target=\"_blank\" rel=\"noreferrer noopener\">32 \u0161kodliv\u00fdch roz\u0161\u00edren\u00ed prehliada\u010da Chrome<\/a>. Dokopy mali viac ako 75 mili\u00f3nov stiahnut\u00ed. Okrem legit\u00edmnej funkcionality, napr\u00edklad kradli citliv\u00e9 inform\u00e1cie alebo vkladali na str\u00e1nky nevy\u017eiadan\u00fa reklamu.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Z\u00e1kladn\u00e9 dosky od <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/gigabyte-releases-new-firmware-to-fix-recently-disclosed-security-flaws\/\" target=\"_blank\" rel=\"noreferrer noopener\">GIGABYTE s\u00fa n\u00e1chyln\u00e9 vo\u010di \u00fatoku man-in-the-middle<\/a>. Softv\u00e9r na aktualiz\u00e1ciu firmware sa toti\u017e pozer\u00e1 na niektor\u00fa z troch Gigabyte str\u00e1nok, pri\u010dom dve z nich pou\u017e\u00edvaj\u00fa len HTTP a teda spojenie m\u00f4\u017ee by\u0165 unesen\u00e9 \u00fato\u010dn\u00edkom, ktor\u00fd m\u00f4\u017ee n\u00e1sledne podvrhn\u00fa\u0165 \u0161kodliv\u00fd obsah. Probl\u00e9m rie\u0161i najnov\u0161ia aktualiz\u00e1cia firmware.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.scmagazine.com\/analysis\/business-continuity\/cyber-risk-closely-entwined-economic-health\" target=\"_blank\" rel=\"noreferrer noopener\">Pod\u013ea agent\u00fary Moody\u2019s sa kybernetick\u00e1 bezpe\u010dnos\u0165 a pr\u00e1ca s rizikami \u010doraz viac sp\u00e1ja s ekonomick\u00fdm zdrav\u00edm firmy, dokonca aj s n\u00e1rodnou bezpe\u010dnos\u0165ou.<\/a> Aj ke\u010f m\u00f4\u017ee by\u0165 ignorovanie \u017eiadosti o zv\u00fd\u0161enie zdrojov pre kybernetick\u00fa bezpe\u010dnos\u0165 z kr\u00e1tkodob\u00e9ho h\u013eadiska efekt\u00edvne, stredno a dlhodob\u00e9 d\u00f4sledky m\u00f4\u017eu podnik v\u00fdrazne ohrozi\u0165.\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p>Vy\u0161iel <a href=\"https:\/\/www.scmagazine.com\/resource\/application-security\/the-owasp-api-security-top-10-whats-new-for-2023\" target=\"_blank\" rel=\"noreferrer noopener\">nov\u00fd zoznam OWASP API Security TOP10<\/a>, ktor\u00fd aktualizuje chyby sp\u00f4sobuj\u00face zranite\u013enosti API rozhran\u00ed. \u0160es\u0165 ch\u00fdb zostalo od roku 2019 nezmenen\u00fdch, \u010fal\u0161ie \u0161tyri boli na z\u00e1klade s\u00fa\u010dasn\u00e9ho stavu zmenen\u00e9 alebo pridan\u00e9.\u00a0<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/google-chrome-password-manager-gets-new-safeguards-for-your-credentials\/\" target=\"_blank\" rel=\"noreferrer noopener\">Spr\u00e1vca hesiel v Chrome z\u00edskav\u00e1 nov\u00e9 bezpe\u010dnostn\u00e9<\/a> zabezpe\u010denia, ako napr\u00edklad separ\u00e1tny odkaz pre samostatn\u00e9 spravovanie, biometrick\u00fa autentifik\u00e1ciu na plochu, importovanie hesiel z in\u00fdch spr\u00e1vcov. Pre iOS tie\u017e pribudne preh\u013ead o znovu pou\u017e\u00edvan\u00fdch hesl\u00e1ch na r\u00f4znych kon\u00e1tach a potenci\u00e1lne kompromitovan\u00fdch prihlasovac\u00edch \u00fadajoch.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/cybernews.com\/news\/meta-threat-block-news-facebook-instagram-california\/\" target=\"_blank\" rel=\"noreferrer noopener\">Spolo\u010dnos\u0165 Meta sa vyhr\u00e1\u017ea zablokovan\u00edm odkazov na novinov\u00e9 \u010dl\u00e1nky<\/a> na Facebooku a Instagrame pre pou\u017e\u00edvate\u013eov zo \u0161t\u00e1tu Kalifornia. D\u00f4vodom je snaha o zdanenie platforiem a ich presun medi\u00e1lnym domom v \u0161t\u00e1te. Podobn\u00fd krok viedol v Austr\u00e1li\u00ed viedol k z\u00edskaniu 140 mili\u00f3nov dol\u00e1rov pre medi\u00e1lne domy.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-agencies-to-patch-iphone-bugs-abused-in-spyware-attacks\/\" target=\"_blank\" rel=\"noreferrer noopener\">CISA vydala pr\u00edkaz<\/a>, aby feder\u00e1lne agent\u00fary nain\u0161talovali najnov\u0161ie aktualiz\u00e1cie na ich iPhone-y. Aktualiz\u00e1cia odstra\u0148uje doposia\u013e nezn\u00e1me zranite\u013enosti, ktor\u00e9 umo\u017e\u0148uj\u00fa nasadenie spywaru. Podobne <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/cisa-orders-govt-agencies-to-patch-bugs-exploited-by-russian-hackers\/\" target=\"_blank\" rel=\"noreferrer noopener\">vydala aj pr\u00edkaz<\/a> na odstr\u00e1nenie zranite\u013enost\u00ed, ktor\u00e9 s\u00fa akt\u00edvne zneu\u017e\u00edvan\u00e9 prorusk\u00fdmi hackermi s napojen\u00edm na rusk\u00fa rozviedku GRU.<\/p>\n<\/div>\n\n<div id=\"\" class=\"element core-paragraph\">\n<p><a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/millions-of-github-repos-likely-vulnerable-to-repojacking-researchers-say\/\" target=\"_blank\" rel=\"noreferrer noopener\">Mili\u00f3ny \u00fa\u010dtov na GitHube m\u00f4\u017eu by\u0165 n\u00e1chyln\u00e9 na RepoJacking<\/a>. Ten nast\u00e1va, ke\u010f sa zmen\u00ed meno repozit\u00e1ra. V tom momente sa vytv\u00e1ra presmerovanie s cie\u013eom zabr\u00e1ni\u0165 preru\u0161eniu z\u00e1vislost\u00ed v projekte. Ak si v\u0161ak niekto zaregistruje star\u00e9 meno, tak sa toto presmerovanie st\u00e1va neplatn\u00fdm a m\u00f4\u017eu sa prebera\u0165 z\u00e1vislosti od \u00fato\u010dn\u00edka, ktor\u00e9 m\u00f4\u017eu obsahova\u0165 malware.<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.&nbsp; Politika V \u010cesku sa&#8230;<\/p>\n","protected":false},"author":26,"featured_media":27407,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[88,142],"tags":[94,405,423],"class_list":["post-27410","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-pop-science-sk","category-2023-sk","tag-security-news-sk","tag-cybersecurity-sk","tag-cyber-attacks-sk"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Security News - J\u00fan 2023 - KInIT<\/title>\n<meta name=\"description\" content=\"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kinit.sk\/sk\/security-news-june-2023\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security News - J\u00fan 2023 - KInIT\" \/>\n<meta property=\"og:description\" content=\"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kinit.sk\/sk\/security-news-june-2023\/\" \/>\n<meta property=\"og:site_name\" content=\"KInIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-06T08:58:16+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-07-06T09:04:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1440\" \/>\n\t<meta property=\"og:image:height\" content=\"754\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Marianna Palkova\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@kinit\" \/>\n<meta name=\"twitter:site\" content=\"@kinit\" \/>\n<meta name=\"twitter:label1\" content=\"Autor\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marianna Palkova\" \/>\n\t<meta name=\"twitter:label2\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 min\u00fat\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/\"},\"author\":{\"name\":\"Marianna Palkova\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/8b175aaaf3267b5bbbbb97e4a6db8cea\"},\"headline\":\"Security News &#8211; J\u00fan 2023\",\"datePublished\":\"2023-07-06T08:58:16+00:00\",\"dateModified\":\"2023-07-06T09:04:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/\"},\"wordCount\":1648,\"image\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/June-Web.png\",\"keywords\":[\"security news\",\"cybersecurity\",\"cyber attacks\"],\"articleSection\":[\"Pop science\",\"2023\"],\"inLanguage\":\"sk-SK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/\",\"url\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/\",\"name\":\"Security News - J\u00fan 2023 - KInIT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/June-Web.png\",\"datePublished\":\"2023-07-06T08:58:16+00:00\",\"dateModified\":\"2023-07-06T09:04:57+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/8b175aaaf3267b5bbbbb97e4a6db8cea\"},\"description\":\"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/June-Web.png\",\"contentUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2023\\\/07\\\/June-Web.png\",\"width\":1440,\"height\":754},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-news-june-2023\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pop science\",\"item\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/category\\\/pop-science-sk\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security News &#8211; J\u00fan 2023\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\",\"url\":\"https:\\\/\\\/kinit.sk\\\/\",\"name\":\"KInIT\",\"description\":\"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kinit.sk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/8b175aaaf3267b5bbbbb97e4a6db8cea\",\"name\":\"Marianna Palkova\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security News - J\u00fan 2023 - KInIT","description":"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/","og_locale":"sk_SK","og_type":"article","og_title":"Security News - J\u00fan 2023 - KInIT","og_description":"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0","og_url":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/","og_site_name":"KInIT","article_published_time":"2023-07-06T08:58:16+00:00","article_modified_time":"2023-07-06T09:04:57+00:00","og_image":[{"width":1440,"height":754,"url":"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png","type":"image\/png"}],"author":"Marianna Palkova","twitter_card":"summary_large_image","twitter_creator":"@kinit","twitter_site":"@kinit","twitter_misc":{"Autor":"Marianna Palkova","Predpokladan\u00fd \u010das \u010d\u00edtania":"6 min\u00fat"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#article","isPartOf":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/"},"author":{"name":"Marianna Palkova","@id":"https:\/\/kinit.sk\/#\/schema\/person\/8b175aaaf3267b5bbbbb97e4a6db8cea"},"headline":"Security News &#8211; J\u00fan 2023","datePublished":"2023-07-06T08:58:16+00:00","dateModified":"2023-07-06T09:04:57+00:00","mainEntityOfPage":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/"},"wordCount":1648,"image":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#primaryimage"},"thumbnailUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png","keywords":["security news","cybersecurity","cyber attacks"],"articleSection":["Pop science","2023"],"inLanguage":"sk-SK"},{"@type":"WebPage","@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/","url":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/","name":"Security News - J\u00fan 2023 - KInIT","isPartOf":{"@id":"https:\/\/kinit.sk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#primaryimage"},"image":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#primaryimage"},"thumbnailUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png","datePublished":"2023-07-06T08:58:16+00:00","dateModified":"2023-07-06T09:04:57+00:00","author":{"@id":"https:\/\/kinit.sk\/#\/schema\/person\/8b175aaaf3267b5bbbbb97e4a6db8cea"},"description":"Pre\u010d\u00edtajte si preh\u013ead noviniek z oblasti kybernetickej bezpe\u010dnosti za j\u00fan 2023. Ka\u017ed\u00fd mesiac v\u00e1m budeme prin\u00e1\u0161a\u0165 bezpe\u010dnostn\u00e9 pr\u00edpady a zauj\u00edmavosti, ktor\u00e9 v\u00e1m pom\u00f4\u017eu zosta\u0165 v bezpe\u010d\u00ed.\u00a0","breadcrumb":{"@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kinit.sk\/sk\/security-news-june-2023\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#primaryimage","url":"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png","contentUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2023\/07\/June-Web.png","width":1440,"height":754},{"@type":"BreadcrumbList","@id":"https:\/\/kinit.sk\/sk\/security-news-june-2023\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kinit.sk\/sk\/"},{"@type":"ListItem","position":2,"name":"Pop science","item":"https:\/\/kinit.sk\/sk\/category\/pop-science-sk\/"},{"@type":"ListItem","position":3,"name":"Security News &#8211; J\u00fan 2023"}]},{"@type":"WebSite","@id":"https:\/\/kinit.sk\/#website","url":"https:\/\/kinit.sk\/","name":"KInIT","description":"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kinit.sk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"},{"@type":"Person","@id":"https:\/\/kinit.sk\/#\/schema\/person\/8b175aaaf3267b5bbbbb97e4a6db8cea","name":"Marianna Palkova"}]}},"_links":{"self":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts\/27410","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/comments?post=27410"}],"version-history":[{"count":2,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts\/27410\/revisions"}],"predecessor-version":[{"id":27414,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts\/27410\/revisions\/27414"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/media\/27407"}],"wp:attachment":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/media?parent=27410"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/categories?post=27410"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/tags?post=27410"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}