Cyber alerts

55 results

January 2019

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

DNS Flag Day 2019

On February 1, 2019, all major Domain Name System (DNS, IETF RFC1035) providers will be updating their products and services to address known techniques to bypass the Extension Mechanisms Protocol for DNS (EDNS), known as DNS Flag Day.

CC-2913 Low

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address vulnerabilities in Thunderbird. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2915 Low

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

LockerGoga Ransomware

LockerGoga is a newly observed ransomware tool targeting businesses throughout Western Europe

CC-2916 Low

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

CryptoStealerGo Information Stealing Trojan

First observed in January 2019, CryptostealerGo is an information stealing trojan written in the Golang programming language.

CC-2911 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

Stryker Medical Beds Vulnerabilities

Stryker have released a security update to address vulnerabilities in their wireless enabled medical bed products. These relate to a vulnerability in WPA2 (Wireless Protected Access 2) known as KRACK (Keyless Re-installation Attack).

CC-2909 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 72.0.3626.81 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system.

CC-2908 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2912 Medium

Published Wednesday 30 January 2019 (12:00) (updated 11 January 2022)

Zepakab Downloader Trojan

Zepakab is a newly observed downloader trojan that makes extensive use of open-source AutoIT libraries and is believed to have been created by the APT28 advanced persistent threat.

CC-2910 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

BD FACSLyrics Vulnerability

Benton, Dickinson and Company (BD) have disclosed details of a improper authentication vulnerability in their FACSLyric flow cytometry products.

CC-2907 Medium

Published Tuesday 29 January 2019 (12:00) (updated 14 February 2020)

CryTekk Ransomware

First observed in January 2019, CryTekk is a new variant of the HiddenTear ransomware. CryTekk differs from other HiddenTear variants in that the ransom note directs users to a phishing site designed to capture credit card details and personal information.