Cyber alerts

214 results

December 2019

Published Friday 20 December 2019 (12:00) (updated 29 June 2021)

Philips Healthcare C-arm X-Ray Router Encryption Vulnerability

Philips Healthcare has released details of an encryption vulnerability present across Veradius Unity, Pulsera, and Endura C-Arm. An unauthorised user could exploit this vulnerability to impact data transfer.

CC-3321 Low

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Manager APT Toolkit

First observed in late 2019, the Manager toolkit is a set of three C++ based tools; NewManager, AmpManager, and DDoSManager, created by the ChinaZ advanced persistent threat to primarily target Linux web servers.

CC-3317 Low

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

Momentum Botnet

First observed in late 2018, Momentum is a worm and botnet targeting Linux-based web servers, Internet-of-Things and SOHO devices. The group operating Momentum are believed to be selling the botnet's services through a number of dark web forums.

CC-3305 Low

Published Thursday 5 December 2019 (12:00) (updated 29 June 2021)

CStealer Trojan

CStealer is a newly observed information-stealing trojan targeting the Google Chrome web browser.

November 2019

CC-3299 Low

Published Thursday 28 November 2019 (12:00) (updated 14 February 2020)

Dexphot Trojan

First observed in October 2018, Dexphot is a polymorphic trojan sold on hacking forums and dark web sites.

CC-3301 Low

Published Thursday 28 November 2019 (12:00) (updated 14 February 2020)

HPE Enterprise Storage Abnormal Failure Rate Issue

Hewlett Packard Enterprises (HPE) has released details of an abnormal failure rate issue affecting a number of their enterprise Apollo, ProLiant, StoreVirtual, and Synergy Serial-Attached SCSI solid-state drives (SCSI-SSD).

CC-3300 Low

Published Thursday 28 November 2019 (12:00) (updated 7 May 2021)

DeathRansom Ransomware

A ransomware tool used to encrypt files

CC-3292 Low

Published Friday 15 November 2019 (12:00) (updated 14 February 2020)

Philips IntelliBridge Weak Encryption Vulnerability

Philips Healthcare has released details of an inadequate encryption strength (CWE-326) vulnerability affecting several of their IntelliBridge medical device interface system.

CC-3291 Low

Published Thursday 14 November 2019 (12:00) (updated 14 February 2020)

AnteFrigus Ransomware

AnteFrigus is a newly observed ransomware tool that targets specific drive locations.

CC-3285 Low

Published Monday 11 November 2019 (12:00) (updated 14 February 2020)

Medtronic ValleyLab Generator Authentication Vulnerabilities

Medtronic has released details of several authentication vulnerabilities affecting their ValleyLab electrosurgical platform.