Cyber alerts

259 results

December 2017

CC-1885 Medium

Published Friday 29 December 2017 (12:00) (updated 17 February 2020)

Malware Trio Attacking SQL Servers

A new trio of malware with remote access capabilities has been observed.

CC-1880 Medium

Published Friday 22 December 2017 (12:00) (updated 17 February 2020)

WPAD Exploits

A recent set of vulnerabilities related to Web Proxy Auto Discovery Protocol (WPAD) and Proxy Auto-Config (PAC) have been discovered.

CC-1877 Medium

Published Thursday 21 December 2017 (12:00) (updated 17 February 2020)

ROBOT Attack

A nineteen-year-old vulnerability has been re-discovered in the RSA implementation from different vendors which will allow Man-in-the-Middle attacks on encrypted messages.

CC-1863 Medium

Published Monday 18 December 2017 (12:00) (updated 17 February 2020)

KaiXin Exploit Kit

KaiXin is an exploit kit, first identified in 2012. KaiXin has been delivered via banner ads and JavaScript injection on compromised websites.

CC-1857 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Cisco NX-OS Software TCP Vulnerability

A vulnerability in the Transmission Control Protocol (TCP) stack of the Cisco NX-OS software may allow a remote, unauthenticated attacker to cause a denial-of-service (DoS) condition.

CC-1860 Medium

Published Thursday 14 December 2017 (12:00) (updated 11 January 2022)

Napoleon Ransomware

An altered version of the Blind ransomware, known as Napoleon, has been observed using a manual attack vector to compromise systems. Unlike Blind, which targeted user-generated files only, Napoleon will encrypt all available local and remote files.

CC-1856 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

TLS Bleichenbacher Attack Vulnerability

An error in the way Transport Layer Security (TLS) implements RSA encryption may leave it vulnerable to a Bleichenbacher-style attack.

CC-1858 Medium

Published Thursday 14 December 2017 (12:00) (updated 11 January 2022)

StorageCrypt Ransomware

StorageCrypt is a new family of ransomware that targets network-attached storage (NAS) devices using SambaCry ( CVE-2017-7494 ). SambaCry allows remote attackers to execute arbitrary code on targeted systems by uploading a shared library to a writable network share, and then causing the server to load that library.

CC-1851 Medium

Published Wednesday 13 December 2017 (12:00) (updated 17 February 2020)

Simda Backdoor Trojan

Simda (AKA Rloader) is a backdoor trojan that has previously been used to create a botnet with over 770,000 infected devices across multiple countries, including the UK, USA, France and Turkey.

CC-1835 Medium

Published Wednesday 6 December 2017 (12:00) (updated 17 February 2020)

Gozi ISFB Information-Stealing Trojan

The Gozi ISFB family of information-stealing trojans is designed to obtain banking credentials by recording keystrokes, browsing history, clipboard information, and details of running programs.