Cyber alerts

36 results

September 2017

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Adware Installs InfoStealer Trojan That Loads via Chrome DLL Hijacking

Researchers have discovered that the "AdService" trojan is being distributed by threat actors via adware bundles. It performs Dynamic Link Library (DLL) hijacking in Chrome web browsers.

CC-1654 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Joomla Security Update

Joomla! has released version 3.8.0 of its Content Management System (CMS) software to address a vulnerability. A remote attacker could exploit this vulnerability to obtain access to sensitive information.

CC-1630 Low

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

ManageEngine ADSelfService Plus - GINA Vulnerability

Several vulnerabilities have been identified in the GINA component of the ManageEngine ADSelfService Plus product

CC-1653 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-1657 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Elasticsearch Servers Hijacked to Host PoS Malware

During August 2017, it was discovered that a number of ElasticSearch servers had been hijacked to host Point of Sale (PoS) malware. 99% of servers infected are hosted in Amazon Web Services (AWS).

CC-1655 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address the following vulnerabilities in Samba:

CC-1651 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

WordPress Releases Security Update

WordPress versions prior to 4.8.2 are affected by multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-1647 Low

Published Wednesday 20 September 2017 (12:00) (updated 17 February 2020)

Apache Releases Security Updates for Apache Tomcat

The Apache Foundation has released security updates to address vulnerabilities in Apache Tomcat. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected server.

CC-1646 Medium

Published Wednesday 20 September 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker may exploit some of these vulnerabilities to take control of an affected system.

CC-1645 Low

Published Tuesday 19 September 2017 (12:00) (updated 17 February 2020)

CCleaner Installer Distributes Malware CC-1645

It has been discovered that the maintenance application, CCleaner has been delivering Floxif - a family of malware which collects data from infected systems.