Cyber alerts - NHS England Digital

CC-3751 Medium

Published Friday 12 February 2021 (12:00) (updated 12 February 2021)

Dependency Confusion Substitution Attack Technique

Supply chain attack technique exploiting software development workflows

CC-3705 Medium

Published Wednesday 16 December 2020 (12:00) (updated 17 December 2020)

PLEASE_READ_ME Ransomware Campaign

A widespread ransom campaign against data servers

CC-3160 Medium

Published Thursday 18 July 2019 (12:00) (updated 14 February 2020)

NHS ESR Spear Phishing Campaign

NHS Digital's Cyber Security Operations Centre has been closely monitoring a spear phishing campaign targeting NHS organisations in order to steal Electronic Staff Record (ESR) credentials.

CC-2989 Low

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

CUJO Releases Security Update for Smart Firewall Vulnerabilities

CUJO have released an update to address a vulnerability in its Smart Firewalls. The success exploitation of these vulnerabilities will allow malicious actors to remotely execute code without any form of authentication.

CC-2947 Medium

Published Thursday 21 February 2019 (12:00) (updated 14 February 2020)

Blue-Green Button Phishing Campaign

A spear-phishing campaign has been observed targeting governmental organisations across the UK. The groups operating the campaign appear to be performing reconnaissance on potential targets to ensure higher success rates.

CC-2885 Medium

Published Tuesday 15 January 2019 (12:00) (updated 14 February 2020)

DNSpionage DNS Hijacking Campaign

A new large-scale Domain Name System (DNS) hijacking campaign, known as DNSpionage, has been observed targeting government, infrastructure and telecommunications organisations.

CC-2858 Medium

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Underminer Exploit Kit

First observed in July 2017, the Underminer exploit kit has received various sophisticated updates in recent weeks.

CC-2845 Low

Published Monday 17 December 2018 (12:00) (updated 11 January 2022)

Hoax Bomb Threat Spam Advisory

Organisations worldwide, including the UK have reported receiving hoax spam emails containing bomb threats.

CC-2830 Medium

Published Thursday 6 December 2018 (12:00) (updated 17 February 2020)

EternalSilence UPnP Exploit

EternalSilence is a newly observed attack methodology that targets routers with vulnerable implementations of Universal Plug and Play (UPnP), specifically those that expose their Internet Gateway Device (IGD) controls to the Internet.

CC-2802 Medium

Published Wednesday 21 November 2018 (12:00) (updated 17 February 2020)

Cisco Expressway Restricted Call Exploit

A new attack methodology has been identified leveraging a Cisco Expressway and TelePresence denial-of-service vulnerability (CVE-2018-0358).