Alerts | mmCERT - Myanmar Cyber Emergency Response Team

High Severity Vulnerability in OpenSSH

06-05-26

Open SecureShell (OpenSSH) has released a security update to address a high severity vulnerability in OpenSSH. The vulnerability has a Common Vulnerability Scoring System (CVSS v3.1) score of 8.1 out of 10. Users and administrators of affected products are advised to update to the latest versions immediately.

Critical Vulnerabilities in SolarWinds Web Help Desk

04-02-26

SolarWinds has released security updates to address multiple critical vulnerabilities in their SolarWinds Web Help Desk.

Phishing Email Alert

11-12-23

Cybercriminals are actively sending deceptive Microsoft Word files containing enticing content to the email address dopinformation@gov.mm.gov-org.com, with the intention of pilfering sensitive information.

Critical Vulnerabilities in QNAP QTS Operating System and Applications

08-11-23

QNAP has released security updates to address two critical vulnerabilities (CVE-2023-23368 and CVE-2023-23369) that impact multiple versions of the QTS Operating System (OS) and applications on its network-attached storage (NAS) devices. CVE-2023-23368 has a Common Vulnerability Scoring System (CVSSv3) score of 9.8 out of 10.

Roundcube Webmail Security Alert

29-10-23

The security of Roundcube Webmail is compromised as hackers are actively exploiting Cross-Site Scripting (XSS) Vulnerabilities (CVE-2020-35730, CVE-2020-12641, and CVE-2021-44026). They are specifically leveraging the Exploit Stored XSS Vulnerability (CVE-2023-5631) to gain unauthorized access to email user accounts, with an ongoing operation to pilfer email users' contacts and email body content.

Alert Regarding Malicious Google Drive Links

26-10-23

Cybercriminals are distributing Google Drive links containing a harmful trojan (Win32:Agent-BDFA) to target Gmail users. The specific email account involved is cdm.mofa.diplomat@gmail.com, with the primary goal of illicitly acquiring sensitive information.