Peringatan & Nasihat

Clear
NC4-ALR-2026-000006

Critical Pre-Authentication Remote Code Execution Vulnerability impacting WordPress Core (wp2shell)

NC4 is monitoring active exploitation of a critical vulnerability chain affecting WordPress Core, commonly referred to a...

24 Jul 2026 Advisory
View Details
NC4-ALR-2026-000005

Critical Unauthenticated Remote Code Execution in SP Pagebuilder extension for Joomla — CVE-2026-48908

NC4, (NACSA), has observed multiple attacks and incidents involving CVE-2026-48908, a critical improper access control v...

01 Jul 2026 Advisory
View Details
NC4-ALR-2026-000004

Critical Unauthenticated Remote Code Execution in Joomla Content Editor (JCE) CVE-2026-48907

NC4, (NACSA), has observed multiple attacks and incidents involving CVE-2026-48907, a critical improper access control v...

26 Jun 2026 Advisory
View Details
NC4-ALR-2026-000002

Advisory on Reported Credential Exposure Affecting Fortinet FortiGate Devices

Summary The National Cyber Coordination and Command Centre (NC4) is aware of recent reports regarding a large-scale expo...

19 Jun 2026 Advisory
View Details
NC4-ALR-2026-000001

Network Segmentation and Control to Prevent Malware Propagation

Recent nation-state and criminal campaigns demonstrate a consistent technique used to maximise operational disruption: l...

03 Mac 2026 Technical
View Details
NC4-ALR-2025-000006

Critical Memory Exposure and Access Control Vulnerabilities in Citrix NetScaler ADC and Gateway

Three critical vulnerabilities in NetScaler ADC and Gateway have been disclosed and observed in active exploitation. Exp...

08 Jul 2025 Technical
View Details
NC4-ALR-2025-000005

Protecting Trusted Services and Control Planes to Disrupt Ransomware Attacks

Recent ransomware campaigns reveal a strategic shift in attacker behaviour -- targeting trusted control planes, the back...

22 Jun 2025 Technical
View Details
NC4-ALR-2025-000004

Critical Persistent Access via SSL-VPN Symbolic Link Abuse in Fortinet FortiOS Devices

This technique bypasses traditional patch validation and may expose internal configuration files, administrative credent...

14 Apr 2025 Technical
View Details