Cyber alerts

238 results

December 2017

Published Friday 29 December 2017 (12:00) (updated 17 February 2020)

Janus Android Vulnerability

Janus is an Android vulnerability that allows an attacker to modify an application undetected. This is achieved by adding a malicious Dalvik executable (DEX) file to an Android Package Kit (APK) file.

CC-1881 Low

Published Wednesday 27 December 2017 (12:00) (updated 17 February 2020)

Ineffective configuration on Lexmark printers

Over 1000 mis-configured Lexmark printers have been discovered operating open to the public internet.

CC-1884 Low

Published Wednesday 27 December 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address multiple vulnerabilities in Thunderbird. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1880 Medium

Published Friday 22 December 2017 (12:00) (updated 17 February 2020)

WPAD Exploits

A recent set of vulnerabilities related to Web Proxy Auto Discovery Protocol (WPAD) and Proxy Auto-Config (PAC) have been discovered.

CC-1874 Low

Published Thursday 21 December 2017 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 63.0.3239.108 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.

CC-1864 Low

Published Tuesday 19 December 2017 (12:00) (updated 17 February 2020)

Keyloggers on HP devices

A keylogger has been found in the SynTP.sys driver which is found pre-installed on hundreds of HP laptop models.

CC-1857 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Cisco NX-OS Software TCP Vulnerability

A vulnerability in the Transmission Control Protocol (TCP) stack of the Cisco NX-OS software may allow a remote, unauthenticated attacker to cause a denial-of-service (DoS) condition.

CC-1853 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-1856 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

TLS Bleichenbacher Attack Vulnerability

An error in the way Transport Layer Security (TLS) implements RSA encryption may leave it vulnerable to a Bleichenbacher-style attack.

CC-1859 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Symantec Encryption Desktop Local Privilege Escalation

A vulnerability in the kernel driver, PGPwded.sys, allows an attacker to attain arbitrary hard disk read and write access at sector level.