Cyber alerts

38 results

July 2019

Published Wednesday 31 July 2019 (12:00) (updated 14 February 2020)

Urgent/11 VxWorks RTOS Vulnerabilities

Security researchers have disclosed eleven vulnerabilities, collectively named Urgent/11, affecting Wind River's VxWorks real-time operating system (RTOS).

CC-3165 Medium

Published Tuesday 30 July 2019 (12:00) (updated 14 February 2020)

Guildma Remote Access Trojan

Guildma is a modular remote access trojan targeting financial and governmental organisations. First observed in 2015 in campaigns primarily targeting South America, Guildma began to see use in global campaigns starting in May 2019.

CC-3152 Low

Published Thursday 25 July 2019 (12:00) (updated 11 January 2022)

Brushaloader Downloader Trojan

First observed in June 2018, Brushaloader is a downloader trojan affiliated with the TA544 (also known as Narwhal Spider) advanced persistent threat.

CC-3164 Low

Published Thursday 25 July 2019 (12:00) (updated 14 February 2020)

BillGates Backdoor

BillGates, also known as Setag, is a backdoor and distributed denial-of-service botnet generated using a builder.

CC-3163 Low

Published Wednesday 24 July 2019 (12:00) (updated 14 February 2020)

Watchbog Linux Trojan

Watchbog is a newly observed trojan targeting Linux web servers running a variety of automation, database, mail, and project management products.

CC-3162 Medium

Published Tuesday 23 July 2019 (12:00) (updated 14 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3161 Medium

Published Tuesday 23 July 2019 (12:00) (updated 14 February 2020)

Okrum Backdoor

Okrum is a simple backdoor created by the Ke3chang (also known as APT15) advanced persistent threat. First observed in 2016 in campaigns against Eastern European government organisations, Ke3chang now uses Okrum against targets globally.

CC-3151 Low

Published Thursday 18 July 2019 (12:00) (updated 14 February 2020)

Extenbro DNS Trojan

First observed in early 2019, Extenbro is a trojan used in adware campaigns to alter user's Domain Name Server (DNS) settings.

CC-3158 Medium

Published Thursday 18 July 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3159 Low

Published Thursday 18 July 2019 (12:00) (updated 14 February 2020)

EvilGnome Linux Backdoor

EvilGnome is a backdoor targeting vulnerable Linux systems. Despite having similarities with malware employed by the Gamaredon Group, an advanced persistent threat operating in Eastern Europe, EvilGnome is targeting users globally.