{"id":8107,"date":"2021-04-09T11:43:08","date_gmt":"2021-04-09T09:43:08","guid":{"rendered":"https:\/\/kinit.sk\/security-week-3\/"},"modified":"2021-04-09T11:43:08","modified_gmt":"2021-04-09T09:43:08","slug":"security-week-3","status":"publish","type":"post","link":"https:\/\/kinit.sk\/sk\/security-week-3\/","title":{"rendered":"Security week 3"},"content":{"rendered":"
\n

Stay safe. We bring you our regular weekly overview of security news.<\/p>\n<\/div>\n\n

\n

Exchange Hack: Norwegian Parliament Hacked Again<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

After the December attack by Russia-supported APT (advanced persistent threat) group 28, vulnerabilities found in Microsoft Exchange servers have been exploited this time<\/a>. So far there is no information available on the extent of the attack and the data that have been stolen. While the exploitation was originally attributed to the Hafnium APT group supported by China, researchers from ESET identified more than 10 cybercriminal APT groups (e.g. Tick, LuckyMouse, Calypso), including a few unknown groups, that became active in this area and are attempting to take advantage of the situation until updates are installed on the affected servers. In the article<\/a> you will read about the activity of the APT groups. 8 days since the update, more than 46 000 servers were still left unupdated (out of the verified 250 000).<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

Verkada\u2019s Cameras Hacked<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

Hackers gained access to the security cameras at Tesla, Equinox, Bank of Utah and other health clinics, penitentiaries and banks. Moreover, at the Cloudflare and Tesla HQ, superuser privileges have been gained over this surveillance system. The problem lied in hard-coded login credentials for the super administrator account at the Verkada company. The company invalidated all internal administrator accounts and thus prevented any future unauthorized access to the devices.<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

OVH Data Center Fire Likely Caused by Faulty UPS<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

Four data centers<\/a> SBG1-4 in Strasbourg belonging to OVH, the third largest hosting provider in the world, caught fire, causing irreparable damage to some of the data centers. The cause of the fire<\/a> appears to be one of the uninterruptible power supplies (UPS) that was inspected that day. The investigation may make use of recordings from more than 300 cameras installed in Strasbourg. The company has begun with the recovery and has ordered 2000 servers, aiming to order more than 10 000 servers for building a new data center.<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

UK Secretly Testing Controversial Communication Tracking Tool<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

Having passed the Investigatory Powers Act in 2016, the UK has been developing a tool that may be considered one of the most invasive when it comes to collecting data about its citizens among all the democratic countries in the world. The tool is said to store web browsing metadata from each citizen. The digital life metadata includes the who, what, where, when and why.<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

Exchange hack: China-bound ATP group exploits multiple vulnerabilities to gain access to Exchange servers<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

Several vulnerabilities have been exploited to gain access to Exchange servers from Microsoft. These were relatively easy-to-exploit vulnerabilities that were actively used in the real world. Due to the release of a special update for the 2010 exchange, which is no longer supported, it is estimated that some vulnerabilities are more than 10 years<\/a> old. The attack is attributed to the Hafnium group (APT group tied to China), which is known for attacks on industry, law firms, educational institutions, think tanks, NGOs and others in the United States. When attackers gained access to MS Exchange servers, they extracted data and moved it to MEGA cloud services and installed a web shell backdoor. The attack is so severe<\/a> that CISA has issued a special order<\/a> for federal organizations to perform a forensic analysis of this part of the infrastructure and, if they do not find anything, to update the Exchange servers immediately. Vulnerabilities do not affect the Exchange Online service.<\/p>\n<\/div>\n\n

\n

Since the release of the updates, the APT group has significantly increased<\/a> its activity and there is talk of the speed of thousands of broken servers per hour. Based on the timeline<\/a>, we know that on March 5th, several hundred thousand infiltrations were detected (including the installed backdoor).<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

Exchange hack: The European Banking Authority (EBA) has been hit by an attack on Microsoft’s email servers<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

The Chinese-backed ATP group (Hafnium) has exploited hitherto unknown vulnerabilities to infiltrate Exchange servers from Microsoft. EBA temporarily disconnected its Exchange servers and secured its infrastructure. The investigation so far has shown that no data has been leaked.<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>\n\n

\n

The NSA, CISA have issued instructions for using Protective DNS<\/strong><\/strong><\/h3>\n<\/div>\n\n
\n

The NSA and CISA have published guidelines for the deployment of PDNS. PDNS uses the existing DNS protocol and its architecture, analyzes DNS queries and minimizes threats. PDNS can target several defense mechanisms against phishing, malware distribution, c&c (command and control) servers, content filtering, and more. In test mode, they had more than 4 billion DNS queries and blocked connections to millions of malicious domains.<\/p>\n<\/div>\n\n

\n

Full Article<\/a><\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

Stay safe. We bring you our regular weekly overview of security news. Exchange Hack: Norwegian Parliament Hacked Again After the December attack by Russia-supported APT (advanced persistent threat) group 28,…<\/p>\n","protected":false},"author":4,"featured_media":5817,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[82,88,93],"tags":[94],"class_list":["post-8107","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-2021-sk","category-pop-science-sk","category-security-sk","tag-security-news-sk"],"acf":[],"yoast_head":"\nSecurity week 3 - KInIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kinit.sk\/sk\/security-week-3\/\" \/>\n<meta property=\"og:locale\" content=\"sk_SK\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security week 3 - KInIT\" \/>\n<meta property=\"og:description\" content=\"Stay safe. We bring you our regular weekly overview of security news. Exchange Hack: Norwegian Parliament Hacked Again After the December attack by Russia-supported APT (advanced persistent threat) group 28,...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kinit.sk\/sk\/security-week-3\/\" \/>\n<meta property=\"og:site_name\" content=\"KInIT\" \/>\n<meta property=\"article:published_time\" content=\"2021-04-09T09:43:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png\" \/>\n\t<meta property=\"og:image:width\" content=\"320\" \/>\n\t<meta property=\"og:image:height\" content=\"200\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"Peter Pi\u0161tek\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@kinit\" \/>\n<meta name=\"twitter:site\" content=\"@kinit\" \/>\n<meta name=\"twitter:label1\" content=\"Autor\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter Pi\u0161tek\" \/>\n\t<meta name=\"twitter:label2\" content=\"Predpokladan\u00fd \u010das \u010d\u00edtania\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 min\u00faty\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/\"},\"author\":{\"name\":\"Peter Pi\u0161tek\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/74ec3190528eeebc0c678213e65313de\"},\"headline\":\"Security week 3\",\"datePublished\":\"2021-04-09T09:43:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/\"},\"wordCount\":750,\"image\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/kinit-news_001_s.png\",\"keywords\":[\"security news\"],\"articleSection\":[\"2021\",\"Pop science\",\"Security\"],\"inLanguage\":\"sk-SK\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/\",\"url\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/\",\"name\":\"Security week 3 - KInIT\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/kinit-news_001_s.png\",\"datePublished\":\"2021-04-09T09:43:08+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/74ec3190528eeebc0c678213e65313de\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#breadcrumb\"},\"inLanguage\":\"sk-SK\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"sk-SK\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/kinit-news_001_s.png\",\"contentUrl\":\"https:\\\/\\\/kinit.sk\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/kinit-news_001_s.png\",\"width\":320,\"height\":200},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/security-week-3\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kinit.sk\\\/sk\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Pop science\",\"item\":\"https:\\\/\\\/kinit.sk\\\/category\\\/pop-science\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Security week 3\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#website\",\"url\":\"https:\\\/\\\/kinit.sk\\\/\",\"name\":\"KInIT\",\"description\":\"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kinit.sk\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"sk-SK\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kinit.sk\\\/#\\\/schema\\\/person\\\/74ec3190528eeebc0c678213e65313de\",\"name\":\"Peter Pi\u0161tek\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Security week 3 - KInIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kinit.sk\/sk\/security-week-3\/","og_locale":"sk_SK","og_type":"article","og_title":"Security week 3 - KInIT","og_description":"Stay safe. We bring you our regular weekly overview of security news. Exchange Hack: Norwegian Parliament Hacked Again After the December attack by Russia-supported APT (advanced persistent threat) group 28,...","og_url":"https:\/\/kinit.sk\/sk\/security-week-3\/","og_site_name":"KInIT","article_published_time":"2021-04-09T09:43:08+00:00","og_image":[{"width":320,"height":200,"url":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png","type":"image\/png"}],"author":"Peter Pi\u0161tek","twitter_card":"summary_large_image","twitter_creator":"@kinit","twitter_site":"@kinit","twitter_misc":{"Autor":"Peter Pi\u0161tek","Predpokladan\u00fd \u010das \u010d\u00edtania":"4 min\u00faty"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#article","isPartOf":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/"},"author":{"name":"Peter Pi\u0161tek","@id":"https:\/\/kinit.sk\/#\/schema\/person\/74ec3190528eeebc0c678213e65313de"},"headline":"Security week 3","datePublished":"2021-04-09T09:43:08+00:00","mainEntityOfPage":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/"},"wordCount":750,"image":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#primaryimage"},"thumbnailUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png","keywords":["security news"],"articleSection":["2021","Pop science","Security"],"inLanguage":"sk-SK"},{"@type":"WebPage","@id":"https:\/\/kinit.sk\/sk\/security-week-3\/","url":"https:\/\/kinit.sk\/sk\/security-week-3\/","name":"Security week 3 - KInIT","isPartOf":{"@id":"https:\/\/kinit.sk\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#primaryimage"},"image":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#primaryimage"},"thumbnailUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png","datePublished":"2021-04-09T09:43:08+00:00","author":{"@id":"https:\/\/kinit.sk\/#\/schema\/person\/74ec3190528eeebc0c678213e65313de"},"breadcrumb":{"@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#breadcrumb"},"inLanguage":"sk-SK","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kinit.sk\/sk\/security-week-3\/"]}]},{"@type":"ImageObject","inLanguage":"sk-SK","@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#primaryimage","url":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png","contentUrl":"https:\/\/kinit.sk\/wp-content\/uploads\/2021\/03\/kinit-news_001_s.png","width":320,"height":200},{"@type":"BreadcrumbList","@id":"https:\/\/kinit.sk\/sk\/security-week-3\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kinit.sk\/sk\/"},{"@type":"ListItem","position":2,"name":"Pop science","item":"https:\/\/kinit.sk\/category\/pop-science\/"},{"@type":"ListItem","position":3,"name":"Security week 3"}]},{"@type":"WebSite","@id":"https:\/\/kinit.sk\/#website","url":"https:\/\/kinit.sk\/","name":"KInIT","description":"Vyu\u017e\u00edvame v\u00fdskum pre \u013eud\u00ed a priemysel","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kinit.sk\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"sk-SK"},{"@type":"Person","@id":"https:\/\/kinit.sk\/#\/schema\/person\/74ec3190528eeebc0c678213e65313de","name":"Peter Pi\u0161tek"}]}},"_links":{"self":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts\/8107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/comments?post=8107"}],"version-history":[{"count":0,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/posts\/8107\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/media\/5817"}],"wp:attachment":[{"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/media?parent=8107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/categories?post=8107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kinit.sk\/sk\/wp-json\/wp\/v2\/tags?post=8107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}