Cyber alerts

0 results

December 2019

Published Wednesday 11 December 2019 (12:00) (updated 29 June 2021)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3321 Low

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Manager APT Toolkit

First observed in late 2019, the Manager toolkit is a set of three C++ based tools; NewManager, AmpManager, and DDoSManager, created by the ChinaZ advanced persistent threat to primarily target Linux web servers.

CC-3317 Low

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

Momentum Botnet

First observed in late 2018, Momentum is a worm and botnet targeting Linux-based web servers, Internet-of-Things and SOHO devices. The group operating Momentum are believed to be selling the botnet's services through a number of dark web forums.

CC-3325 Low

Published Friday 20 December 2019 (12:00) (updated 29 June 2021)

Philips Healthcare C-arm X-Ray Router Encryption Vulnerability

Philips Healthcare has released details of an encryption vulnerability present across Veradius Unity, Pulsera, and Endura C-Arm. An unauthorised user could exploit this vulnerability to impact data transfer.

CC-3304 Information only

Published Thursday 5 December 2019 (12:00) (updated 29 June 2021)

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3305 Low

Published Thursday 5 December 2019 (12:00) (updated 29 June 2021)

CStealer Trojan

CStealer is a newly observed information-stealing trojan targeting the Google Chrome web browser.

CC-3302 Medium

Published Wednesday 4 December 2019 (12:00) (updated 29 June 2021)

Machete Trojan

First observed in early 2019, Machete (also known as Ragua) is a Python-based information stealing trojan. Originally targeted at Spanish-speaking Latin American countries, it has begun to appear in campaigns in Europe and North America.

CC-3316 Information only

Published Tuesday 17 December 2019 (12:00) (updated 29 June 2021)

WordPress Releases Security and Maintenance Updates

WordPress 5.3 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-3315 Information only

Published Thursday 12 December 2019 (12:00) (updated 29 June 2021)

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-3308 Medium

Published Thursday 12 December 2019 (12:00) (updated 29 June 2021)

Snatch Ransomware

Snatch is a newly observed ransomware-as-a-service tool primarily targeting American, Canadian, and European organisations.