Newsroom | CIRCL

CIRCL newsroom

Cybersecurity updates from Luxembourg

Follow CIRCL's latest announcements, technical publications, project milestones and official press releases in one place.

Latest stories Subscribe to feeds

Latest intelligence

Latest technical reports

92 reports

Technical report27 September 2026

TR-100 Multiple Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

Summary Multiple vulnerabilities have been disclosed in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway). The …

Read technical report

Technical report1 June 2026

TR-99 - Phishing Campaign Targeting Hotel Customers in Luxembourg

Executive Summary CIRCL and Horesca have been informed of a phishing campaign targeting customers of hotels in Luxembourg. A significant number of hotel guests have …

Read technical report

Technical report9 February 2026

TR-98 - Security Advisory Ivanti Endpoint Manager Mobile (EPMM) (CVE-2026-1281 & CVE-2026-1340) - Active Exploitation

Ivanti has released security updates for Endpoint Manager Mobile (EPMM) addressing two critical-severity vulnerabilities. Successful exploitation allows unauthenticated …

Read technical report

Publication archive

All technical reports

28.11.2025

TR-97 - Supply Chain Compromise Propagating Through the npm Ecosystem (Shai-Hulud)

15.10.2025

TR-96 - Multiple Vulnerabilities in F5 Devices and Products - Impact and Mitigation

20.07.2025

TR-95 - Critical vulnerability - Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. CVE-2025-53770 - CVE-2025-53771

22.05.2025

TR-94 - Ongoing Phishing Campaigns Targeting Microsoft 365 Tenants Lacking Multi-Factor Authentication

22.01.2025

TR-92 - Unused Domain Names and the Risks of Missing DNS SPF Records

20.12.2024

TR-90 - Vulnerability identified as CVE-2023-34990, affecting Fortinet FortiWLM

20.12.2024

TR-91 - Vulnerability identified as CVE-2024-0012, affecting Palo Alto Networks PAN-OS software

12.11.2024

TR-89 - Guidelines for Notifying CSIRT/CERT of Red Teaming and Penetration Testing Exercises - Enhancing Detection and Coordination

30.08.2024

TR-88 - Motivation, procedure and rationale for leaked credential notifications

19.07.2024

TR-87 - CrowdStrike Agent causing BSOD loop on Windows - Faulty Update on Falcon Sensor

31.05.2024

TR-86 - Check Point VPN Information Disclosure (CVE-2024-24919) - Actively Exploited

25.04.2024

TR-85 - Three vulnerabilities in Cisco ASA software/appliance and FTD software being exploited

12.04.2024

TR-84 - PAN-OS (Palo Alto Networks) OS Command Injection Vulnerability in GlobalProtect Gateway - CVE-2024-3400

03.04.2024

TR-83 - Linux Boot Hardening HOWTO

30.03.2024

TR-82 - backdoor discovered in xz-utils - CVE-2024-3094

09.02.2024

TR-81 - Critical FortiOS vulnerabilities in sslvpnd and fgfmd

07.02.2024

TR-80 - Targeted SMS and fake phone center call targeting financial/banking services

05.02.2024

TR-79 - AnyDesk Incident and Potential Associated Supply Chain Attack

11.01.2024

TR-78 - CVE-2023-46805 (Authentication Bypass) & CVE-2024-21887 (Command Injection) for Ivanti Connect Secure and Ivanti Policy Secure Gateways + CVE-2024-21888 + CVE-2024-21893

30.08.2023

TR-77 - Spear phishing and voice call scams targeting corporate executives and their accounting department

14.08.2023

TR-76 - Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

21.07.2023

TR-75 - Unauthenticated remote code execution vulnerability in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) - CVE-2023-3519

05.07.2023

TR-74 - A heap-based buffer overflow vulnerability [CWE-122] in FortiOS - CVE-2023-27997

07.03.2023

TR-73 - Ransomware FAQ

21.02.2023

TR-72 - Vulnerable Microsoft Exchange server metrics leading to alarming situation

13.12.2022

TR-71 - FortiOS - heap-based buffer overflow in sslvpnd (exploited) - FortiOS SSL-VPN - CVE-2022-42475

30.09.2022

TR-70 - Vulnerabilities in Microsoft Exchange CVE-2022-41040 - CVE-2022-41082

13.06.2022

TR-69 - How to choose an ICT supplier from a security perspective

28.02.2022

TR-68 - Best practices in times of tense geopolitical situations

26.01.2022

TR-67 - local privilege escalation vulnerability in polkit's pkexec utility.

15.12.2021

TR-66 - Webservers with mod_status like debug modules publicly available leak information

10.12.2021

TR-65 - Vulnerabilities and Exploitation of Log4j (Remote code injection in Log4j)

10.11.2021

TR-64 - Exploited Exchange Servers - Mails with links to malware from known/valid senders

21.04.2021

TR-63 - Vulnerabilities and Exploitation of Pulse Connect Secure

06.04.2021

TR-62 - Leak of Facebook Data from 533 Million Users

12.03.2021

TR-61 - Critical vulnerabilities in Microsoft Exchange

16.12.2020

TR-30 - Acquisition Support Tools for Local Incident Response Teams (LIRT)

15.12.2020

TR-22 - Recommendations for Readiness to Handle Computer Security Incidents

26.06.2020

TR-60 - Phishing - Effects and precautions

18.03.2020

TR-59 - Remote Work - In times of a crisis

11.03.2020

TR-58 - CVE-2020-0796 - Critical vulnerability in Microsoft SMBv3 - status and mitigation

10.12.2019

TR-57 - Ransomware - Effects and precautions

19.03.2019

TR-56 - HTTP Strict Transport Security

12.09.2018

TR-55 - SquashFu - an alternate Open Source Backup solution, resilient to Crypto Ransomware attacks

03.08.2018

TR-54 - Sextortion scam emails - I know your password

12.04.2018

TR-53 - Statement about WHOIS and GDPR

05.02.2018

TR-52 - Forensic Analysis of an HID Attack

23.11.2017

TR-51 - How to react to fraudulent acts of third party invoicing or requesting funds without showing any purchase order

16.10.2017

TR-50 - WPA2 handshake traffic can be manipulated to induce nonce and session key reuse

26.05.2017

TR-49 - CVE-2017-7494 - A critical vulnerability in Samba - remote code execution from a writable share

06.03.2017

TR-48 - Cyber-Threats Indicators Sharing, security-related actionable information and future of Personal Data Protection framework in the EU - MISP and GDPR

23.02.2017

TR-47 - Recommendations regarding Abuse handling for ISPs and registrars

17.02.2017

TR-46 - Information Leaks Affecting Luxembourg and Recommendations

12.05.2016

TR-45 - Data recovery techniques

15.03.2016

TR-44 - Information security - laws and specific rulings in the Grand Duchy of Luxembourg

11.01.2016

TR-43 - Installing MPSS 3.6.1 to use a Intel Xeon Phi Coprocessor on Ubuntu Trusty 14.04 LTS

21.12.2015

TR-42 - CVE-2015-7755 - CVE-2015-7756 - Critical vulnerabilities in Juniper ScreenOS

24.09.2015

TR-40 - Allaple worm activity in 2015 and long-term persistence of worm (malware) in Local Area Networks

30.07.2015

TR-39 - CIRCL-SOPs Standard Operational Procedures

08.07.2015

TR-19 - UDP Protocols Security - Recommendations To Avoid or Limit DDoS reflection / amplification

14.05.2015

TR-37 - VENOM / CVE-2015-3456 - Critical vulnerability in QEMU Floppy Disk Controller (FDC) emulation

28.04.2015

TR-26 Security Recommendations for Web Content Management Systems and Web Servers

28.04.2015

TR-36 Example setup of WordPress with static export

13.03.2015

TR-07 - HOWTO find SMTP headers in common Email clients

13.03.2015

TR-34 How to view and extract raw messages in common email clients

17.02.2015

TR-33 Analysis - CTB-Locker / Critroni

10.02.2015

TR-32 - key-value store and NoSQL security recommendations

29.01.2015

TR-31 - GHOST / CVE-2015-0235 - glibc vulnerability - gethostbyname() (associated function calls)

23.01.2015

TR-08 - CIRCL automatic launch object detection for Mac OS X

02.01.2015

TR-29 - NTP (Network Time Protocol) daemon - ntpd - critical vulnerabilities

26.11.2014

TR-23 Analysis - NetWiredRC malware

15.10.2014

TR-28 - The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, are vulnerable to a critical padding oracle attack - CVE-2014-3566

10.10.2014

TR-27 - GNU Bash Critical Vulnerability - CVE-2014-6271 - CVE-2014-7169

10.07.2014

TR-25 Analysis - Turla / Pfinet / Snake/ Uroburos

03.07.2014

TR-14 - Analysis of a stage 3 Miniduke malware sample

03.06.2014

TR-24 Analysis - Destory RAT family

17.04.2014

TR-21 - OpenSSL Heartbeat Critical Vulnerability

19.02.2014

TR-18 - PBX and VoIP Security - Recommendations

18.02.2014

TR-20 - Port evolution, a software to find the shady IP profiles in Netflow

17.01.2014

TR-12 - Analysis of a PlugX malware variant used for targeted attacks

22.11.2013

TR-17 - Java.Tomdep - Information, Detection and Recommendation

14.10.2013

TR-16 - HoneyBot Services - Client Data Collection

29.08.2013

TR-15 - Hand of Thief/Hanthie Linux Malware - Detection and Remediation

29.05.2013

TR-13 - Malware analysis report of a Backdoor. Snifula variant

30.01.2013

TR-11 - Security Flaws in Universal Plug and Play (UPnP) - Disable UPnP

16.01.2013

TR-10 - Red October / Sputnik malware

31.08.2012

TR-09 - Malware Discovery and potential Removal (Windows 7)

07.09.2011

TR-06 - DigiNotar incident and general SSL/TLS security consequences (September 2011)

22.08.2011

TR-05 - SSL/TLS Security of Servers in Luxembourg (August 2011)

Top