Cyber alerts

37 results

April 2019

Published Monday 29 April 2019 (12:00) (updated 14 February 2020)

Oracle Releases Security Alert

Oracle has released a security alert to address a vulnerability in WebLogic. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-3038 Low

Published Monday 29 April 2019 (12:00) (updated 14 February 2020)

ISC Releases BIND Security Updates

The Internet Systems Consortium (ISC) has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

CC-3035 Medium

Published Thursday 25 April 2019 (12:00) (updated 14 February 2020)

INPIVX Ransomware Service

INPIVX is a newly observed service offering buyers access to a comprehensive ransomware tool and control dashboard. Unlike other ransomware-as-a-service tools, the group operating INPIVX do not offer hosting or delivery services.

CC-3037 Medium

Published Thursday 25 April 2019 (12:00) (updated 14 February 2020)

Karkoff DNS Malware

Karkoff is a newly observed .NET-based malware believed to have been created by the group behind DNSpionage for use as a remote execution tool during these campaigns.

CC-3036 Low

Published Wednesday 24 April 2019 (12:00) (updated 14 February 2020)

WordPress Social Warfare Vulnerability

Two vulnerabilities have been identified in the popular Social Warfare WordPress plugin. The first being a remote code execution bug and the other a cross site scripting vulnerability.

CC-3034 Low

Published Wednesday 24 April 2019 (12:00) (updated 14 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 74.0.3729.108 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3032 Medium

Published Wednesday 24 April 2019 (12:00) (updated 20 May 2021)

RevengeRAT Remote Access Trojan

RevengeRAT (also known as Revetrat) is an open source remote access trojan that was first observed in 2016.

CC-3031 Low

Published Thursday 18 April 2019 (12:00) (updated 14 February 2020)

Broadcom WiFi Driver Vulnerabilities

Broadcom and CERT/CC have released details of four vulnerabilities in the drivers used in their WiFi chipsets. A remote unauthenticated attacker could exploit these to take control of an affected system.

CC-3030 Low

Published Thursday 18 April 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released a security update to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3029 Low

Published Thursday 18 April 2019 (12:00) (updated 14 February 2020)

Drupal Releases Security Updates

Drupal has released security updates to address multiple vulnerabilities in Drupal Core. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.