Cyber alerts

Apache Releases Security Advisory for Apache Tomcat

Philips Ultrasound Authentication Bypass Vulnerability

Microsoft Releases Security Updates for Windows

Microsoft has released security updates to address a vulnerability in Windows 10 version 1903. An attacker could exploit this vulnerability to overwrite or modify a protected file and gain elevated privileges.

ISC Releases Security Advisories for BIND

The Internet Systems Consortium (ISC) has released security advisories that address vulnerabilities affecting multiple versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation. An attacker could exploit some of these vulnerabilities to take control of an affected system.

WastedLocker Ransomware

WastedLocker is a newly observed ransomware tool believed to have been created but the TA505 advanced persistent threat group for use in their own campaigns.

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 7, 8.8, 8.9, and 9.0. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

Cisco Releases Multiple Security Updates

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

IndigoDrop Trojan

IndigoDrop is a modular dropper trojan used in sophisticated campaigns against governmental, financial, and military organisations worldwide. It was first identified in the wild in September 2019, although it is believed to have been used in earlier attacks.

CryCryptor Ransomware

CryCryptor is ransomware that targets Android devices and is disguised as a COVID-19 tracing app. It is based on open-source ransomware called CryDroid that was found published on GitHub, ostensibly for 'research purposes'.