Sharing Threats Information
The NCSC sends periodic reports over email regarding the latest cybersecurity threats. Reports contain analysis of threats, descriptions of critical exploitable vulnerabilities, and security best practices. The reports also contain Indicators of Compromise (IOC) that customers can use to enable their systems to detect and mitigate these threats.
Constituency
- Government Entities
- Non-Government Entities and sectors including
- Financial organizations
- Healthcare organizations
- Information and Communication Technology (ICT) organizations
- Transportation organizations
- Critical National Infrastructure (CNI) organizations
Get notified about the next threat
Cyber Threat Advisories
Critical Microsoft Exchange Server Vulnerability
Read More – Critical Microsoft Exchange Server Vulnerability, PDF · 592.73 KB(opens in a new tab)PDF · 592.73 KB
Critical Vulnerability CVE-2024-20253 in Cisco Unified Communications Products
Read More – Critical Vulnerability CVE-2024-20253 in Cisco Unified Communications Products, PDF · 616.41 KB(opens in a new tab)PDF · 616.41 KB
Exploitation of CVE-2023-29357 SharePoint Vulnerability
Read More – Exploitation of CVE-2023-29357 SharePoint Vulnerability, PDF · 602.31 KB(opens in a new tab)PDF · 602.31 KB
Hacktivist Attack
Read More – Hacktivist Attack, PDF · 587.65 KB(opens in a new tab)PDF · 587.65 KB
TA402 Targeting Middle East Government
Read More – TA402 Targeting Middle East Government, PDF · 624.14 KB(opens in a new tab)PDF · 624.14 KB
Critical Vulnerability in Citrix NetScaler
Read More – Critical Vulnerability in Citrix NetScaler, PDF · 615.79 KB(opens in a new tab)PDF · 615.79 KB
Cisco Critical Vulnerability Exploited by Threat Actors
Read More – Cisco Critical Vulnerability Exploited by Threat Actors, PDF · 601.77 KB(opens in a new tab)PDF · 601.77 KB
Protecting Against DDoS Attacks
Read More – Protecting Against DDoS Attacks, PDF · 578.44 KB(opens in a new tab)PDF · 578.44 KB
An Iranian APT Behind Recent Password Spray Attacks
Read More – An Iranian APT Behind Recent Password Spray Attacks, PDF · 673.75 KB(opens in a new tab)PDF · 673.75 KB
Critical Citrix ShareFile Flaw Being Exploited
Read More – Critical Citrix ShareFile Flaw Being Exploited, PDF · 597.01 KB(opens in a new tab)PDF · 597.01 KB
APT34 (OilRig) Supply Chain Attack
Read More – APT34 (OilRig) Supply Chain Attack , PDF · 610.61 KB(opens in a new tab)PDF · 610.61 KB
Iran-linked APT TA453 targets Windows and macOS
Read More – Iran-linked APT TA453 targets Windows and macOS, PDF · 627.87 KB(opens in a new tab)PDF · 627.87 KB
APT Group Targeting Governments in the Middle East and Africa
Read More – APT Group Targeting Governments in the Middle East and Africa, PDF · 638.58 KB(opens in a new tab)PDF · 638.58 KB
Papercut Vulnerability Exploited by Iranian APT Groups
Read More – Papercut Vulnerability Exploited by Iranian APT Groups, PDF · 626.30 KB(opens in a new tab)PDF · 626.30 KB
Charming Kitten Deploys BellaCiao in Middle East Attacks
Read More – Charming Kitten Deploys BellaCiao in Middle East Attacks , PDF · 614.70 KB(opens in a new tab)PDF · 614.70 KB
Destructive Attacks by MuddyWater and DEV-1084
Read More – Destructive Attacks by MuddyWater and DEV-1084 , PDF · 639.19 KB(opens in a new tab)PDF · 639.19 KB
Rorschach Ransomware Hits the Middle East
Read More – Rorschach Ransomware Hits the Middle East , PDF · 627.26 KB(opens in a new tab)PDF · 627.26 KB
Two Exploited Zero-Day Vulnerabilities in Microsoft
Read More – Two Exploited Zero-Day Vulnerabilities in Microsoft, PDF · 607.56 KB(opens in a new tab)PDF · 607.56 KB
Critical Vulnerability Threatens Microsoft Products
Read More – Critical Vulnerability Threatens Microsoft Products, PDF · 622.46 KB(opens in a new tab)PDF · 622.46 KB
Several Vulnerabilities in VMware Products
Read More – Several Vulnerabilities in VMware Products , PDF · 593.32 KB(opens in a new tab)PDF · 593.32 KB
OilRig Targeting Middle East with New Backdoor
Read More – OilRig Targeting Middle East with New Backdoor , PDF · 615.70 KB(opens in a new tab)PDF · 615.70 KB
Active Campaign Targeting Middle East
Read More – Active Campaign Targeting Middle East, PDF · 655.03 KB(opens in a new tab)PDF · 655.03 KB
Critical Zero-Day Vulnerability in FortiOS SSL-VPN
Read More – Critical Zero-Day Vulnerability in FortiOS SSL-VPN , PDF · 649.93 KB(opens in a new tab)PDF · 649.93 KB
Microsoft Patches an Exploited Zero-Day Vulnerability
Read More – Microsoft Patches an Exploited Zero-Day Vulnerability, PDF · 589.51 KB(opens in a new tab)PDF · 589.51 KB
APT42 Targeting Middle East
Read More – APT42 Targeting Middle East , PDF · 613.93 KB(opens in a new tab)PDF · 613.93 KB
A New Phishing Campaign By MuddyWater
Read More – A New Phishing Campaign By MuddyWater , PDF · 617.33 KB(opens in a new tab)PDF · 617.33 KB
Critical Vulnerability in Oracle Fusion Middleware
Read More – Critical Vulnerability in Oracle Fusion Middleware , PDF · 595.64 KB(opens in a new tab)PDF · 595.64 KB
Emennet Pasarged Iranian Threat Group
Read More – Emennet Pasarged Iranian Threat Group, PDF · 671.42 KB(opens in a new tab)PDF · 671.42 KB
VMware Patches Several Vulnerabilities in Workspace ONE Assist
Read More – VMware Patches Several Vulnerabilities in Workspace ONE Assist , PDF · 586.15 KB(opens in a new tab)PDF · 586.15 KB
VMware Patches Critical RCE Vulnerability
Read More – VMware Patches Critical RCE Vulnerability, PDF · 609.82 KB(opens in a new tab)PDF · 609.82 KB
Middle Eastern Governments Targeted by ‘Witchetty’
Read More – Middle Eastern Governments Targeted by ‘Witchetty’ , PDF · 599.46 KB(opens in a new tab)PDF · 599.46 KB
New Microsoft Exchange Zero-Days Actively Exploited in the Wild
Read More – New Microsoft Exchange Zero-Days Actively Exploited in the Wild, PDF · 418.70 KB(opens in a new tab)PDF · 418.70 KB
New Threat Actor Targeting Middle East
Read More – New Threat Actor Targeting Middle East, PDF · 590.25 KB(opens in a new tab)PDF · 590.25 KB
Apple Products Affected by CVE-2022-32917
Read More – Apple Products Affected by CVE-2022-32917 , PDF · 608.45 KB(opens in a new tab)PDF · 608.45 KB
Urgent Chrome Update to Patch Zero Day Vulnerability
Read More – Urgent Chrome Update to Patch Zero Day Vulnerability , PDF · 612.71 KB(opens in a new tab)PDF · 612.71 KB
Microsoft Patches a Zero-Day Vulnerability Under Exploitation
Read More – Microsoft Patches a Zero-Day Vulnerability Under Exploitation, PDF · 357.32 KB(opens in a new tab)PDF · 357.32 KB
Microsoft Exchange Servers being Compromised by IIS Backdoors
Read More – Microsoft Exchange Servers being Compromised by IIS Backdoors, PDF · 355.31 KB(opens in a new tab)PDF · 355.31 KB
Google Chrome Update to Patch New Zero-Day Vulnerability
Read More – Google Chrome Update to Patch New Zero-Day Vulnerability, PDF · 338.01 KB(opens in a new tab)PDF · 338.01 KB
RCE Exploit in Zoho ManageEngine ADAudit Plus
Read More – RCE Exploit in Zoho ManageEngine ADAudit Plus, PDF · 364.06 KB(opens in a new tab)PDF · 364.06 KB
A New kind of Windows NTLM Relay Attack
Read More – A New kind of Windows NTLM Relay Attack, PDF · 251.89 KB(opens in a new tab)PDF · 251.89 KB
A New .NET-based DNS Backdoor Used by Lyceum
Read More – A New .NET-based DNS Backdoor Used by Lyceum, PDF · 218.50 KB(opens in a new tab)PDF · 218.50 KB
Atlassian Releases Patch for Actively Exploited Flaw
Read More – Atlassian Releases Patch for Actively Exploited Flaw, PDF · 239.05 KB(opens in a new tab)PDF · 239.05 KB
High Severity MSDT Zero-Day Vulnerability in Microsoft
Read More – High Severity MSDT Zero-Day Vulnerability in Microsoft, PDF · 245.37 KB(opens in a new tab)PDF · 245.37 KB
Two Critical Vulnerabilities Reported in Mozilla
Read More – Two Critical Vulnerabilities Reported in Mozilla, PDF · 181.02 KB(opens in a new tab)PDF · 181.02 KB
Critical Vulnerabilities Impact VMware Products
Read More – Critical Vulnerabilities Impact VMware Products, PDF · 202.10 KB(opens in a new tab)PDF · 202.10 KB
Critical RCE Vulnerability Impacts F5 Product
Read More – Critical RCE Vulnerability Impacts F5 Product, PDF · 213.02 KB(opens in a new tab)PDF · 213.02 KB
Threat Actors Exploiting Critical VMware Vulnerability
Read More – Threat Actors Exploiting Critical VMware Vulnerability, PDF · 200.97 KB(opens in a new tab)PDF · 200.97 KB
Custom Tools Targeting ICS/SCADA Devices
Read More – Custom Tools Targeting ICS/SCADA Devices, PDF · 290.40 KB(opens in a new tab)PDF · 290.40 KB
Microsoft Patches High Severity Actively Exploited Vulnerabilities
Read More – Microsoft Patches High Severity Actively Exploited Vulnerabilities, PDF · 222.81 KB(opens in a new tab)PDF · 222.81 KB
Phishing Campaign Leverages Azure Static Web Apps
Read More – Phishing Campaign Leverages Azure Static Web Apps, PDF · 267.06 KB(opens in a new tab)PDF · 267.06 KB
Critical Zero-Day Vulnerability in Java Spring Framework
Read More – Critical Zero-Day Vulnerability in Java Spring Framework, PDF · 206.83 KB(opens in a new tab)PDF · 206.83 KB
Google Patches High Severity Bug in Chrome
Read More – Google Patches High Severity Bug in Chrome, PDF · 207.20 KB(opens in a new tab)PDF · 207.20 KB
Microsoft Confirms Breach by Lapsus$
Read More – Microsoft Confirms Breach by Lapsus$, PDF · 186.80 KB(opens in a new tab)PDF · 186.80 KB
Two Actively Exploited Vulnerabilities Effecting Mozilla
Read More – Two Actively Exploited Vulnerabilities Effecting Mozilla, PDF · 187.42 KB(opens in a new tab)PDF · 187.42 KB
Attackers Target MS-SQL Servers with Cobalt Strike
Read More – Attackers Target MS-SQL Servers with Cobalt Strike, PDF · 186.48 KB(opens in a new tab)PDF · 186.48 KB
A Zero-Day vulnerability exploited in Google Chrome
Read More – A Zero-Day vulnerability exploited in Google Chrome, PDF · 188.38 KB(opens in a new tab)PDF · 188.38 KB
Zero-Day Exploit for Log4j Java Library
Read More – Zero-Day Exploit for Log4j Java Library, PDF · 232.40 KB(opens in a new tab)PDF · 232.40 KB|IOCs – Zero-Day Exploit for Log4j Java Library, XLSX · 22.60 KB(opens in a new tab)XLSX · 22.60 KB
WIRTE Campaign Targets Middle East Entities
Read More – WIRTE Campaign Targets Middle East Entities, PDF · 221.90 KB(opens in a new tab)PDF · 221.90 KB|IOCs – WIRTE Campaign Targets Middle East Entities, XLSX · 20.11 KB(opens in a new tab)XLSX · 20.11 KB
MuddyWater's Phishing Campaign Targets The Middle East
Read More – MuddyWater's Phishing Campaign Targets The Middle East, PDF · 301.16 KB(opens in a new tab)PDF · 301.16 KB
Attackers Exploiting Zoho ManageEngine
Read More – Attackers Exploiting Zoho ManageEngine, PDF · 211.11 KB(opens in a new tab)PDF · 211.11 KB
Zero-day exploit of Exchange Server vulnerability
Read More – Zero-day exploit of Exchange Server vulnerability, PDF · 264.17 KB(opens in a new tab)PDF · 264.17 KB
NPM UA-Parser-JS Poisoned with Trojans
Read More – NPM UA-Parser-JS Poisoned with Trojans, PDF · 195.06 KB(opens in a new tab)PDF · 195.06 KB
DEV-0343 Operating Against the US and the Middle East
Read More – DEV-0343 Operating Against the US and the Middle East, PDF · 204.40 KB(opens in a new tab)PDF · 204.40 KB
MalKamak Targets Global Aerospace & Telecoms Firms
Read More – MalKamak Targets Global Aerospace & Telecoms Firms, PDF · 227.56 KB(opens in a new tab)PDF · 227.56 KB
A Zero-Day Flaw in Apache HTTP Server
Read More – A Zero-Day Flaw in Apache HTTP Server, PDF · 201.23 KB(opens in a new tab)PDF · 201.23 KB
Two Zero-Day Flaws in Google Chrome
Read More – Two Zero-Day Flaws in Google Chrome, PDF · 182.56 KB(opens in a new tab)PDF · 182.56 KB
Critical Flaw in VMware vCenter Server
Read More – Critical Flaw in VMware vCenter Server, PDF · 203.67 KB(opens in a new tab)PDF · 203.67 KB
Apple Patches FORCEDENTRY Zero-Day Vulnerability
Read More – Apple Patches FORCEDENTRY Zero-Day Vulnerability, PDF · 205.43 KB(opens in a new tab)PDF · 205.43 KB
A Zero-Day Flaw in Google Chrome
Read More – A Zero-Day Flaw in Google Chrome, PDF · 190.49 KB(opens in a new tab)PDF · 190.49 KB
Attackers Exploiting ADSelfService Plus Flaw
Read More – Attackers Exploiting ADSelfService Plus Flaw, PDF · 195.80 KB(opens in a new tab)PDF · 195.80 KB
A Zero-Day Flaw in Microsoft Office
Read More – A Zero-Day Flaw in Microsoft Office, PDF · 187.28 KB(opens in a new tab)PDF · 187.28 KB
Several Vulnerabilities Impacting F5 Products
Read More – Several Vulnerabilities Impacting F5 Products, PDF · 244.07 KB(opens in a new tab)PDF · 244.07 KB
ProxyShell Affecting Microsoft Exchange Servers
Read More – ProxyShell Affecting Microsoft Exchange Servers, PDF · 197.17 KB(opens in a new tab)PDF · 197.17 KB
PetitPotam NTLM Relay Attack
Read More – PetitPotam NTLM Relay Attack, PDF · 200.56 KB(opens in a new tab)PDF · 200.56 KB
Internet Explorer Vulnerability Actively Exploited
Read More – Internet Explorer Vulnerability Actively Exploited, PDF · 187.16 KB(opens in a new tab)PDF · 187.16 KB
Zero-Day Vulnerability Impacting SolarWinds
Read More – Zero-Day Vulnerability Impacting SolarWinds, PDF · 204.68 KB(opens in a new tab)PDF · 204.68 KB
Critical RCE Vulnerability Affecting Azure PowerShell
Read More – Critical RCE Vulnerability Affecting Azure PowerShell, PDF · 184.75 KB(opens in a new tab)PDF · 184.75 KB
Windows Print Spooler Privilege Escalation Vulnerability
Read More – Windows Print Spooler Privilege Escalation Vulnerability, PDF · 211.41 KB(opens in a new tab)PDF · 211.41 KB
Proof of Concept Exploit for Cisco Flaw
Read More – Proof of Concept Exploit for Cisco Flaw, PDF · 195.48 KB(opens in a new tab)PDF · 195.48 KB
TA402 Attacks Governments in The Middle East
Read More – TA402 Attacks Governments in The Middle East, PDF · 209.43 KB(opens in a new tab)PDF · 209.43 KB
BackdoorDiplomacy Attacks Diplomats in The Middle East & Africa
Read More – BackdoorDiplomacy Attacks Diplomats in The Middle East & Africa, PDF · 198.89 KB(opens in a new tab)PDF · 198.89 KB|IOCs – BackdoorDiplomacy Attacks Diplomats in The Middle East & Africa, TXT · 2.04 KB(opens in a new tab)TXT · 2.04 KB
PuzzleMaker Threat Group Attacks Windows Devices
Read More – PuzzleMaker Threat Group Attacks Windows Devices, PDF · 195.07 KB(opens in a new tab)PDF · 195.07 KB
Windows MSHTML Platform Remote Code Execution Vulnerability
Read More – Windows MSHTML Platform Remote Code Execution Vulnerability, PDF · 191.95 KB(opens in a new tab)PDF · 191.95 KB
Agrius Employed Wipers Disguised as Ransomware
Read More – Agrius Employed Wipers Disguised as Ransomware, PDF · 227.78 KB(opens in a new tab)PDF · 227.78 KB|IOCs – Agrius Employed Wipers Disguised as Ransomware, TXT · 3.87 KB(opens in a new tab)TXT · 3.87 KB
Critical Vulnerability Reported in Vmware vCenter Server
Read More – Critical Vulnerability Reported in Vmware vCenter Server, PDF · 197.31 KB(opens in a new tab)PDF · 197.31 KB
APT Actors are Exploiting a Pulse Secure Flaw
Read More – APT Actors are Exploiting a Pulse Secure Flaw, PDF · 209.08 KB(opens in a new tab)PDF · 209.08 KB
Zero-day Exploit in Desktop Window Manager
Read More – Zero-day Exploit in Desktop Window Manager, PDF · 254.10 KB(opens in a new tab)PDF · 254.10 KB
APT Groups Exploiting Fortinet SSL VPN
Read More – APT Groups Exploiting Fortinet SSL VPN, PDF · 193.59 KB(opens in a new tab)PDF · 193.59 KB
Several Vulnerabilities Impacting F5 Products
Read More – Several Vulnerabilities Impacting F5 Products, PDF · 190.95 KB(opens in a new tab)PDF · 190.95 KB
Various Exchange Server Zero-Days Under Attack
Read More – Various Exchange Server Zero-Days Under Attack, PDF · 208.88 KB(opens in a new tab)PDF · 208.88 KB|IOCs – Various Exchange Server Zero-Days Under Attack, TXT · 1.34 KB(opens in a new tab)TXT · 1.34 KB
Phishing Campaign Leverages Telegram for Exfiltration
Read More – Phishing Campaign Leverages Telegram for Exfiltration, PDF · 353.68 KB(opens in a new tab)PDF · 353.68 KB|IOCs – Phishing Campaign Leverages Telegram for Exfiltration, TXT · 2.57 KB(opens in a new tab)TXT · 2.57 KB


