The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven initiative designed to gather, review, report and respond to computer security threats and incidents.

OUR SERVICES
MISP Logo
Malware Information Sharing Platform (MISP) and Threat Sharing Platform
DMA Logo
Dynamic Malware Analysis Platform (DMA)
USB Logo
Clean documents from untrusted USB keys / sticks
DNS Logo
Database storing historical DNS records
More services

Recent highlights

TR-50 - WPA2 handshake traffic can be manipulated to induce nonce and session key reuse - 16th October 2017

TR-49 - CVE-2017-7494 - A critical vulnerability in Samba - remote code execution from a writable share - 26th May 2017

MS17-010 is critical and patches MUST BE applied. including EOL Windows. - 12th May 2017

TR-46 - Information Leaks Affecting Luxembourg and Recommendations (regularly updated) - 22nd December 2016

TR-42 - CVE-2015-7755 - CVE-2015-7756 - Critical vulnerabilities in Juniper ScreenOS - 21st December 2015

TR-41 (fr) - Crypto Ransomware - Défenses proactives et réponse sur incident - 1st December 2015

TR-41 - Crypto Ransomware - Proactive defenses and incident response - 1st December 2015

TR-38 (fr) - Attaques visant les solutions bancaires d'entreprise - Recommandations - 28th May 2015

TR-38 - Attacks targeting enterprise banking solutions - recommendations and remediations - 19th May 2015

TR-37 - VENOM / CVE-2015-3456 - Critical vulnerability in QEMU Floppy Disk Controller (FDC) emulation - 14th May 2015

TR-36 Example setup of WordPress with static export Another approach to secure your WordPress CMS - 29th April 2015

TR-33 Analysis - CTB-Locker / Critroni - 18th February 2015

A new wave of crypto ransomware targeting Luxembourg - Une nouvelle vague de ransomware cible le Luxembourg - 5th February 2015

glibc: buffer overflow in gethostbyname - 27th January 2015

NTP (Network Time Protocol) daemon - ntpd - critical vulnerabilities - 22nd December 2014

The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, are vulnerable to critical padding oracle attack - CVE-2014-3566

TR-27 - GNU Bash Critical Vulnerability - CVE-2014-6271 - CVE-2014-7169 - 24th September 2014

CIRCL warns about spear phishing scams targeting corporate executives and their accounting department - 14th September 2014

[Previous news]

Latest CIRCL tweets

  • In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file… https://t.co/TuBCHOtQ79 https://twitter.com/i/web/status/941342936578609152 2017-12-14 16:23:40
  • RT @MISPProject: Thanks to SHSauler (and the team at SAP) for sending us a bunch of "diet" sweets to power our brains to keep us warm durin… 2017-12-14 14:28:49
  • RT @MISPProject: We have a significant ongoing project regarding regulation and compliance https://t.co/9t9m3tUzaR "Information sharing and… https://github.com/MISP/misp-compliance/blob/master/GDPR/information_sharing_and_cooperation_gdpr.md 2017-12-14 11:09:31
  • RT @USCERT_gov: Apple Releases Security Updates for iOS and tvOS https://t.co/lNZHe6LttW http://bit.ly/2zaCKIA 2017-12-14 02:30:28
  • "@bgpmon systems detected a suspicious event where many prefixes for high profile destinations were being announced… https://t.co/j3bdlqNdLQ https://twitter.com/i/web/status/940998368536551424 2017-12-13 17:34:28
  • RT @MISPProject: The @MISPProject dashboard functionality to specify a geo-localised area was designed because CSIRTs and security teams ar… 2017-12-12 16:44:51
  • TLS implementations may disclose side channel information via discrepancies between valid and invalid PKCS#1 padding https://t.co/BQxNVdqqxR http://www.kb.cert.org/vuls/id/144389 2017-12-12 16:41:20

Search