Cyber alerts

461 results

December 2019

Published Friday 20 December 2019 (12:00) (updated 29 June 2021)

Philips Healthcare C-arm X-Ray Router Encryption Vulnerability

Philips Healthcare has released details of an encryption vulnerability present across Veradius Unity, Pulsera, and Endura C-Arm. An unauthorised user could exploit this vulnerability to impact data transfer.

CC-3324 Information only

Published Friday 20 December 2019 (12:00) (updated 29 June 2021)

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities in Drupal 7.x, 8.7.x, and 8.8.x. An attacker could exploit some of these vulnerabilities to modify data on an affected website.

CC-3321 Low

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Manager APT Toolkit

First observed in late 2019, the Manager toolkit is a set of three C++ based tools; NewManager, AmpManager, and DDoSManager, created by the ChinaZ advanced persistent threat to primarily target Linux web servers.

CC-3322 Information only

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome for Windows, Mac, and Linux

Google has released security updates for Chrome version 79.0.3945.88 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.

CC-3323 Information only

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Microsoft Releases Out-of-Band Security Updates

Microsoft has released out-of-band security updates to address a vulnerability in SharePoint Server. An attacker could exploit this vulnerability to obtain sensitive information.

CC-3320 Medium

Published Thursday 19 December 2019 (12:00) (updated 29 June 2021)

Dacls Remote Access Trojan

First observed in October 2019, Dacls is a multi-platform modular remote access trojan believed to have been created by the Hidden Cobra advanced persistent threat group.

CC-3318 Information only

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

Avaya Releases Security Update

Avaya has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3317 Low

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

Momentum Botnet

First observed in late 2018, Momentum is a worm and botnet targeting Linux-based web servers, Internet-of-Things and SOHO devices. The group operating Momentum are believed to be selling the botnet's services through a number of dark web forums.

CC-3319 Information only

Published Wednesday 18 December 2019 (12:00) (updated 29 June 2021)

TP-Link Releases Security Update

TP-Link has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3316 Information only

Published Tuesday 17 December 2019 (12:00) (updated 29 June 2021)

WordPress Releases Security and Maintenance Updates

WordPress 5.3 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.