Cyber alerts - NHS England Digital

Published Tuesday 14 January 2020 (12:00) (updated 21 January 2020)

Citrix RCE Vulnerability in Multiple Products

Citrix has released details of a remote code execution (RCE) vulnerability and recommended steps for mitigation. Threat actors now appear to be targeting vulnerable devices.

CC-2956 Low

Published Monday 4 March 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates for ColdFusion

Adobe has released security updates to address a vulnerability in ColdFusion. A threat actor could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild.

CC-3265 Medium

Published Friday 18 October 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3028 Low

Published Wednesday 17 April 2019 (12:00) (updated 14 February 2020)

MegaLocker Ransomware

MegaLocker (also known as NamPoHyu) is a newly observed ransomware tool.

CC-2936 Low

Published Thursday 14 February 2019 (12:00) (updated 14 February 2020)

Dirty Sock Linux Privilege Escalation Vulnerability

A security researcher has released details of a vulnerability in the snapd daemon used to manage Canonical 'Snap' packages.

CC-3079 Medium

Published Tuesday 4 June 2019 (12:00) (updated 14 February 2020)

Jason Microsoft Exchange Brute Force Tool

The source code for a new hacking tool named Jason, allegedly used by the OilRig advanced persistent threat group (also known as APT34), has been leaked online.

CC-3183 Low

Published Thursday 15 August 2019 (12:00) (updated 14 February 2020)

Norman Cryptocurrency Miner

Norman is a newly observed C++ based cryptocurrency miner targeting Windows desktop and server systems.

CC-3295 Medium

Published Thursday 21 November 2019 (12:00) (updated 14 February 2020)

Phoenix Information Stealing Trojan

Phoenix is a newly observed information stealing trojan sold through a number of hacking forums and dark web sites.

CC-2874 Low

Published Thursday 10 January 2019 (12:00) (updated 14 February 2020)

Juniper Networks Releases Multiple Security Updates

Juniper Networks has released multiple security updates to address vulnerabilities in various Juniper products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3053 Medium

Published Thursday 16 May 2019 (12:00) (updated 14 February 2020)

ElectricFish Backdoor

ElectricFish is a newly observed backdoor created by the HIDDEN COBRA advanced persistent threat group for use in their own campaigns.