Cyber alerts

Critical Vulnerability in CrushFTP

The critical vulnerability assigned CVE-2023-43177 could allow remote code execution on affected devices

Malware Persistence within VMware ESXi Hypervisors

Log4Shell Vulnerabilities in VMware Horizon Targeted to Install Web Shells

Attackers are actively targeting Log4Shell vulnerabilities in VMware Horizon servers in an effort to establish web shells.

PetitPotam NTLM relay attack technique

An NTLM relay attack targeting Windows domain controllers and other Windows servers

Nobelium Advanced Spear-Phishing Campaign

A sophisticated phishing campaign delivering downloaders to Western organisations

Fortinet FortiOS Vulnerabilities Under Active Exploitation

Warning issued by US security agencies

Dependency Confusion Substitution Attack Technique

Supply chain attack technique exploiting software development workflows

PLEASE_READ_ME Ransomware Campaign

A widespread ransom campaign against data servers

NHS ESR Spear Phishing Campaign

NHS Digital's Cyber Security Operations Centre has been closely monitoring a spear phishing campaign targeting NHS organisations in order to steal Electronic Staff Record (ESR) credentials.

Blue-Green Button Phishing Campaign

A spear-phishing campaign has been observed targeting governmental organisations across the UK. The groups operating the campaign appear to be performing reconnaissance on potential targets to ensure higher success rates.