Cyber alerts

39 results

March 2017

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Update for iWork

Apple has released a security update for MacOS 10.12 (and later) and iOS 10.0 (and later) to address a vulnerability in iWork that allows a remote attacker to obtain sensitive information.

CC-1301 Low

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

Cybercriminals Targeting FTP Servers

Criminals are actively targeting File Transfer Protocol (FTP) servers associated with health facilities in order to access personally identifiable information.

CC-1297 Medium

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

LLTP Ransomware

A new ransomware has been identified based on the Venus Locker ransomware .

CC-1300 Low

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

SAP Vulnerable to Ransomware Attacks

The SAP scheduled monthly patch roll-out corrected a vulnerability in the SAP GUI that allows an attacker to bypass security controls and execute code on the user's system.

CC-1295 Low

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

VMware Release Security Updates for ESXi Workstation and Fusion

Threat Intelligence received from US-CERT states the following:

CC-1286 Medium

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

DDoS of Things Becoming a Growing Phenomenon

Distributed Denial of Service ( DDoS ) of Things is the term given to the act of using often unsecure IoT devices to launch powerful DDoS attacks.

CC-1288 Low

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

Difobot Worm

Phishing emails claiming to come from HSBC are tricking user’s to install the information stealing worm, Difobot.

CC-1291 Medium

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

DoubleAgent Code-Injection Attack

Researchers have discovered a new Windows vulnerability which can allow an attacker full control of an affected system.

CC-1289 Low

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

NexusLogger - A New Cloud-Based Keylogger

NexusLogger is a cloud-based keylogger which was first discovered earlier in the year and is mostly distributed by spam email.

CC-1287 Medium

Published Wednesday 22 March 2017 (12:00) (updated 21 December 2021)

PetrWrap Ransomware

A new variant of what is believed to PetrWrap ransomware is leveraging a modified EternalBlue SMBv1 exploit (patched in MS017-010) which WannaCry used to self-propagate to local and remote networks.