Over the past two days, cybersecurity and internet regulation have been in the spotlight. The main topic is the mass exploitation of critical vulnerabilities in MikroTik routers, dubbed MikroTric. Attackers can gain full control over devices with open SSH access. The vendor has released patches, and users are strongly advised to update. Experts also discovered a new hacker group DENOmination Group targeting Russian organizations using the legitimate Deno runtime to execute malicious code. In regulation: CryptoPro is developing a browser with built-in cryptography, which may become mandatory for the public sector. A Moscow court fined Twitch and Pinterest 3.5 million rubles each for failing to fulfill social network owner duties. These events are important for XConnect users as they highlight the need to update equipment, be cautious with phishing, and monitor legislative changes.
Cybersecurity and Regulation: 48-Hour Digest
Key events: critical MikroTik vulnerabilities, attacks on Russian companies via Deno, new browser from CryptoPro, and fines for Twitch and Pinterest.
Sources
- RU Tech Talk: Связка багов в RouterOS позволяет взять под полный контроль роутеры MikroTik
- Хабр — информационная безопасность: DENOmination Group: Deno в цепочках атак на российские организации
- Коммерсантъ — регулирование интернета: В России появится новый браузер с криптографической защитой
- Коммерсантъ — регулирование интернета: Суд в Москве назначил Twitch и Pinterest штрафы по 3,5 млн рублей