Cyber alerts - NHS England Digital

CC-1916 Low

Published Wednesday 10 January 2018 (12:00) (updated 17 February 2020)

MS-ISAC Releases Advisory on PHP Vulnerabilities

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-1959 Medium

Published Thursday 25 January 2018 (12:00) (updated 17 February 2020)

Cryptowall Ransomware

First observed in 2014, Cryptowall is a ransomware trojan that has the capability to encrypt files on network and removable drives. Targets have primarily been in the USA and UK.

CC-2713 Low

Published Monday 8 October 2018 (12:00) (updated 17 February 2020)

Git Project Releases Security Updates

The Git Project have release security updates to address a vulnerability in the Git command line client, GitHub desktop and Atom. An attacker could exploit this vulnerability execute arbitrary code on a vulnerable system.

CC-2742 Low

Published Monday 22 October 2018 (12:00) (updated 17 February 2020)

Microsoft Releases Security Update for Yammer

Microsoft has released a security update to address a vulnerability in the Yammer desktop application. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-2535 Low

Published Wednesday 11 July 2018 (12:00) (updated 17 February 2020)

Microsoft Releases July 2018 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2499 Low

Published Tuesday 19 June 2018 (12:00) (updated 17 February 2020)

Axis Releases Security Updates for IP Cameras

Axis has released firmware updates to address vulnerabilities in their range of IP cameras. A remote attacker could exploit this vulnerability to remotely take control of affected devices.

CC-2511 Medium

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

Firebase Data Exposure Vulnerability

A significant data exposure vulnerability has been discovered in Google Firebase development platform for web and mobile applications which can leak sensitive data from backend servers.

CC-2281 Low

Published Thursday 19 April 2018 (12:00) (updated 17 February 2020)

IIS Targeted by Cryptocurrency Miners

A vulnerability in older versions of Microsoft's Internet Information Services (IIS) web server is being used by attackers to install cryptocurrency miners on vulnerable devices.

CC-2029 Low

Published Thursday 8 February 2018 (12:00) (updated 17 February 2020)

ADBminer Android Cryptomining Botnet

A new botnet malware has been observed targeting Android devices. Known as ADBminer, it uses the enrolled devices to mine the Monero cryptocurrency.

CC-2662 Medium

Published Wednesday 12 September 2018 (12:00) (updated 17 February 2020)

Browser Address Spoofing Vulnerability

Details of a vulnerability in how some browsers load their address bars has been disclosed by a security researcher.