Cyber alerts

36 results

September 2017

Published Tuesday 19 September 2017 (12:00) (updated 17 February 2020)

VMware Host Code Execution Vulnerabilities

VMware has released a security advisory that includes three flaws that can be exploited by a malicious attacker to launch attacks against a number of VMware products.

CC-1643 Medium

Published Monday 18 September 2017 (12:00) (updated 17 February 2020)

VMware Release Security Updates - September

VMware has released security updates to address vulnerabilities in ESXi, vCenter Server, Fusion, and Workstation. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1641 Low

Published Thursday 14 September 2017 (12:00) (updated 17 February 2020)

Backdoor Found in WordPress Plugin

A WordPress plugin called Display Widgets has been used to install a backdoor on WordPress websites. The backdoor code was found between Display Widgets version 2.6.1 (released June 30) and version 2.6.3 (released September 2).

CC-1640 Low

Published Thursday 14 September 2017 (12:00) (updated 17 February 2020)

Secure Kernel Extension Loading SKEL Bypass

A new security feature added in MacOS High Sierra (10.13) named "Secure Kernel Extension Loading" (SKEL) can be bypassed to allow the loading of malicious kernel extensions.

CC-1638 Medium

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe RoboHelp, Flash Player, and ColdFusion. Exploitation of these vulnerabilities allows a remote attacker to take control of an affected system.

CC-1637 Low

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

Android Toast Overlay Attack

A new method of cyber attack, known as an overlay attack has been detailed. A successful overlay attack would allow a UI (user interface) to be placed over the top of the existing UI, masking what the user is actually interacting with.

CC-1636 Medium

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

Microsoft Releases Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system.

CC-1635 Medium

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

BlueBorne Bluetooth Vulnerabilities

A number of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively affect Windows, OS X, and Linux-kernel-based operating systems including Android and Tizen.

CC-1633 Medium

Published Tuesday 12 September 2017 (12:00) (updated 17 February 2020)

Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Vulnerabilities

An independent researcher has identified eight vulnerabilities in the Smiths-medical Medfusion 4000 Wireless Syringe Infusion Pump.

CC-1631 Low

Published Monday 11 September 2017 (12:00) (updated 17 February 2020)

Dragonfly 2.0

Dragonfly is a Russian-speaking Advanced Persistent Threat APT group that has been active since 2011 and have recently been observed targeting companies in the US and Europe.