Cyber alerts

25 results

January 2017

Published Tuesday 31 January 2017 (12:00) (updated 17 February 2020)

Cisco WebEx Browser Extension Remote Code Execution Vulnerability

A vulnerability identified in Cisco’s WebEx browser extension allows an unauthenticated, remote attacker to execute arbitrary code on the affected browser on an affected system.

CC-1121 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Android banking malware source code published

The source code of a new Android banking malware has been published along with instructions on how to use it.

CC-1114 Medium

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

APT Group Carbanak Uses Public Cloud Services as Command and Control Server

Google services are being used as a Command and Control (C2) server for Carbanak group’s malware, which spies on data and escalates privileges within the user’s infrastructure.

CC-1123 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Fruitfly - Retro Mac Malware Targets Biomedical Industry

Apple has released a security patch for a new retro looking malware variant which was recently discovered on a Mac at a University Health Centre.

CC-1124 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Container Breaker Vulnerability Discovered

Docker and other similar container software packages contain a vulnerability that can allow access to the host device.

CC-1120 Medium

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Oracles First Critical Patch Update of 2017 Identifies 270 flaws

Oracle’s Critical Patch Update (CPU) is a scheduled quarterly release designed to close holes in the security of many of Oracle’s product lines. The latest release offers fixes for over 270 flaws throughout Oracle’s various product lines.

CC-1122 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Microsoft Advise Business Customers to Migrate From Windows 7

Microsoft has announced that extended support for Windows 7 is coming to an end. There are two deadlines depending on the version of the operating system.

CC-1116 Medium

Published Thursday 26 January 2017 (12:00) (updated 11 January 2022)

Satan Ransomware

A new ransomware tool, known as Satan, discovered by security researchers is being offered as-a-service .

CC-1105 Medium

Published Wednesday 25 January 2017 (12:00) (updated 17 February 2020)

HMRC Seasonal Spear Phishing Emails

Spear phishing emails appearing to be from HM Revenue & Customs (HMRC) are known to increase in volume from January to March, towards the end of the UK financial year.

CC-1093 Low

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Attacks on CPUs from USB port

Studies have found that Intel CPUs (Central Processing Unit) containing a debugging interface is accessible via USB 3.0 allowing the attacker to gain full control of the machine.