Cyber alerts

59 results

October 2018

Published Wednesday 31 October 2018 (12:00) (updated 6 September 2021)

Windows UWP File Access Vulnerability

A vulnerability in Microsoft's Universal Windows Platform (UWP) allows UWP applications full access to a device's file system without user permission. An attacker could exploit this vulnerability to exfiltrate user and system information or cause a denial-of-service condition of an affected application.

CC-2758 Low

Published Wednesday 31 October 2018 (12:00) (updated 11 January 2022)

CommonRansom Ransomware

CommonRansom is a newly observed ransomware whose operators offer an unusual method of decrypting files.

CC-2756 Low

Published Wednesday 31 October 2018 (12:00) (updated 17 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2752 Low

Published Tuesday 30 October 2018 (12:00) (updated 17 February 2020)

systemd DHCP Code Execution Vulnerability

A vulnerability has been disclosed in the systemd software suite used to provide application start-up and management services for Linux-based operating systems.

CC-2753 Low

Published Tuesday 30 October 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in their Advanced Malware Protection (AMP) for Endpoints on Microsoft Windows.

CC-2754 Low

Published Tuesday 30 October 2018 (12:00) (updated 17 February 2020)

DemonBot DDoS Botnet

DemonBot is a newly observed distributed denial-of-service (DDoS) botnet. It actively targets unsecured Apache Hadoop servers via a misconfiguration in Hadoop's YARN ("Yet Another Resource Negotiator") component.

CC-2751 Low

Published Monday 29 October 2018 (12:00) (updated 11 January 2022)

HitmanPro.Alert Multiple Vulnerabilities

Two vulnerabilities have been disclosed in the Sophos HitmanPro.Alert anti-exploit tool. An attacker could exploit these vulnerabilities to gain access to kernel memory locations or execute arbitrary code .

CC-2750 Medium

Published Monday 29 October 2018 (12:00) (updated 17 February 2020)

FilesLocker Ransomware

FilesLocker is a new ransomware-as-a-service (RaaS) that targets Chinese and English speaking users.

CC-2748 Low

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

TimpDoor Android Proxy Malware

First observed in March 2018, TimpDoor is an Android-based malware that is used to create a proxy server on affected devices.

CC-2747 Low

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in Cisco Webex Productivity Tools and the Cisco Webex Meetings Desktop App. An attacker could exploit this vulnerability to take control of an affected system.