Cyber alerts

0 results

December 2019

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome for Windows, Mac, and Linux

Google has released security updates for Chrome version 79.0.3945.88 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.

CC-3323 Information only

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Microsoft Releases Out-of-Band Security Updates

Microsoft has released out-of-band security updates to address a vulnerability in SharePoint Server. An attacker could exploit this vulnerability to obtain sensitive information.

CC-3320 Medium

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Dacls Remote Access Trojan

First observed in October 2019, Dacls is a multi-platform modular remote access trojan believed to have been created by the Hidden Cobra advanced persistent threat group.

CC-3311 Information only

Published Wednesday 11 December 2019 (12:00) (updated 29 June 2021)

Microsoft Releases December 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3324 Information only

Published Friday 20 December 2019 (12:00) (updated 29 June 2021)

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.7.x, and 8.8.x. An attacker could exploit some of these vulnerabilities to modify data on an affected website.

CC-3306 Information only

Published Monday 9 December 2019 (12:00) (updated 29 June 2021)

VMware Releases Security Updates for ESXi and Horizon DaaS

VMware has released security updates to address a vulnerability in ESXi and Horizon Data-as-a-Service (DaaS). An attacker could exploit this vulnerability to take control of an affected system.

CC-3303 Medium

Published Thursday 5 December 2019 (12:00) (updated 29 June 2021)

PyXie Remote Access Trojan

PyXie is a newly observed Python-based remote access trojan that is used in highly targeted campaigns against financial, engineering, and government organisations.

CC-3314 Medium

Published Thursday 12 December 2019 (12:00) (updated 29 June 2021)

Zeppelin Ransomware

Zeppelin is an advanced ransomware-as-a-service tool based on the VegaLocker and Buran malware. Despite sharing large amounts of its code with these older tools, Zeppelin appears to be explicitly targeted at healthcare and technology organisations throughout Western Europe and the USA.

CC-3307 Information only

Published Monday 9 December 2019 (12:00) (updated 29 June 2021)

Microsoft Releases Security Advisory for Windows Hello for Business

Microsoft has released a security advisory to address an issue in Windows Hello for Business (WHfB). An attacker could exploit this issue on devices that were affected by CVE-2017-15361, also known as Return of Coppersmith’s Attack (ROCA), to take control of an affected system.

CC-3318 Information only

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

Avaya Releases Security Update

Avaya has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.