Bulletins | CERT@VDE

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-335a

#StopRansomware: Cuba Ransomware

Title

<a href="/news-events/cybersecurity-advisories/aa22-335a" hreflang="en">#StopRansomware: Cuba Ransomware</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-294a

#StopRansomware: Daixin Team

Title

<a href="/news-events/cybersecurity-advisories/aa22-294a" hreflang="en">#StopRansomware: Daixin Team</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

Protecting Against Malicious Use of Remote Monitoring and Management Software

Title

Protecting Against Malicious Use of Remote Monitoring and Management Software

Published

Jan. 31, 2023, 10:32 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-025a

Summary

Summary The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) (hereafter referred to as the “authoring organizations”) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders about malicious use of legitimate remote monitoring and management (RMM) software. In ...

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-321a

#StopRansomware: Hive Ransomware

Title

<a href="/news-events/cybersecurity-advisories/aa22-321a" hreflang="en">#StopRansomware: Hive Ransomware</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-025a

Protecting Against Malicious Use of Remote Monitoring a...

Title

<a href="/news-events/cybersecurity-advisories/aa23-025a" hreflang="en">Protecting Against Malicious Use of Remote Monitoring and Management Software</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

#StopRansomware: Cuba Ransomware

Title

#StopRansomware: Cuba Ransomware

Published

Jan. 31, 2023, 10:32 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-335a

Summary

Summary Actions to take today to mitigate cyber threats from ransomware: • Prioritize remediating known exploited vulnerabilities. • Train users to recognize and report phishing attempts. • Enable and enforce phishing-resistant multifactor authentication. Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for ...

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-277a

Impacket and Exfiltration Tool Used to Steal Sensitive ...

Title

<a href="/news-events/cybersecurity-advisories/aa22-277a" hreflang="en">Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-279a

Top CVEs Actively Exploited By People’s Republic of Chi...

Title

<a href="/news-events/cybersecurity-advisories/aa22-279a" hreflang="en">Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors</a>

Published

Jan. 31, 2023, 10:32 p.m.

URL

Summary

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester

Title

Iranian Government-Sponsored APT Actors Compromise Federal Network, Deploy Crypto Miner, Credential Harvester

Published

Jan. 31, 2023, 10:32 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-320a

Summary

Summary From mid-June through mid-July 2022, CISA conducted an incident response engagement at a Federal Civilian Executive Branch (FCEB) organization where CISA observed suspected advanced persistent threat (APT) activity. In the course of incident response activities, CISA determined that cyber threat actors exploited the Log4Shell vulnerability in an unpatched VMware ...

#StopRansomware: Hive Ransomware

Title

#StopRansomware: Hive Ransomware

Published

Jan. 31, 2023, 10:32 p.m.

URL

https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-321a

Summary

Summary Actions to Take Today to Mitigate Cyber Threats from Ransomware: • Prioritize remediating known exploited vulnerabilities. • Enable and enforce multifactor authentication with strong passwords • Close unused ports and remove any application not deemed necessary for day-to-day operations. Note: This joint Cybersecurity Advisory (CSA) is part of an ...

Thursday, 26.01.2023

16:35

Delta Electronics CNCSoft ScreenEditor

Title

Delta Electronics CNCSoft ScreenEditor

Published

Jan. 26, 2023, 4:35 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-01

Summary

16:30

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-02

Econolite EOS

Title

Econolite EOS

Published

Jan. 26, 2023, 4:30 p.m.

URL

Summary

16:25

Snap One Wattbox WB-300-IP-3

Title

Snap One Wattbox WB-300-IP-3

Published

Jan. 26, 2023, 4:25 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-03

Summary

16:20

Sierra Wireless AirLink Router with ALEOS Software

Title

Sierra Wireless AirLink Router with ALEOS Software

Published

Jan. 26, 2023, 4:20 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-04

Summary

16:15

Mitsubishi Electric MELFA SD/SQ series and F-series Robot Controllers

Title

Mitsubishi Electric MELFA SD/SQ series and F-series Robot Controllers

Published

Jan. 26, 2023, 4:15 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-05

Summary

16:10

Rockwell Automation products using GoAhead Web Server

Title

Rockwell Automation products using GoAhead Web Server

Published

Jan. 26, 2023, 4:10 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-06

Summary

16:05

https://us-cert.cisa.gov/ics/advisories/icsa-23-026-07

Landis+Gyr E850

Title

Landis+Gyr E850

Published

Jan. 26, 2023, 4:05 p.m.

URL

Summary

16:00

Mitsubishi Electric MELSEC iQ-F, iQ-R Series (Update A)

Title

Mitsubishi Electric MELSEC iQ-F, iQ-R Series (Update A)

Published

Jan. 26, 2023, 4 p.m.

URL

https://us-cert.cisa.gov/ics/advisories/icsa-23-017-02

Summary

Wednesday, 25.01.2023

18:55

AA23-025A: Protecting Against Malicious Use of Remote Monitoring and Management Software

Title

AA23-025A: Protecting Against Malicious Use of Remote Monitoring and Management Software

Published

Jan. 25, 2023, 6:55 p.m.

URL

https://us-cert.cisa.gov/ncas/alerts/aa23-025a

Summary

Original release date: January 25, 2023SummaryThe Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Multi-State Information Sharing and Analysis Center (MS-ISAC) (hereafter referred to as the “authoring organizations”) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders about malicious use of legitimate remote monitoring and ...

Tuesday, 24.01.2023

16:05