Cyber alerts - NHS England Digital

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Advisories for Multiple Products

Cisco has released several security advisories to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2918 Low

Published Wednesday 6 February 2019 (12:00) (updated 14 February 2020)

Marvell Avastar Wireless SoC Multiple Vulnerabilities

Security researchers have released details of multiple vulnerabilities affecting Marvell Avastar wireless system-on-chip (SoC) models.

CC-2919 Low

Published Wednesday 6 February 2019 (12:00) (updated 14 February 2020)

Google Releases Security Update for Android

Google has released a security update to address multiple vulnerabilities in their Android mobile operating system. An attacker could exploit some or all of these vulnerabilities to take control of affected devices.

CC-3286 Medium

Published Wednesday 13 November 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in ESXi, Fusion, and Workstation. An attacker could exploit some of these vulnerabilities to take control of an affected system.For further information:

CC-2863 Medium

Published Thursday 3 January 2019 (12:00) (updated 14 February 2020)

NRSMiner Cryptocurrency Miner

First observed in November 2018, NRSMiner is a cryptocurrency miner that uses the EternalBlue and DoublePulsar exploits to achieve propagation.

CC-2907 Medium

Published Tuesday 29 January 2019 (12:00) (updated 14 February 2020)

CryTekk Ransomware

First observed in January 2019, CryTekk is a new variant of the HiddenTear ransomware. CryTekk differs from other HiddenTear variants in that the ransom note directs users to a phishing site designed to capture credit card details and personal information.

CC-3012 Low

Published Thursday 11 April 2019 (12:00) (updated 14 February 2020)

MicroTik RouterOS DoS Vulnerability

A security researcher has released details of two resource exhaustion vulnerabilities in MikroTik's RouterOS proprietary operating system.

CC-3115 Low

Published Wednesday 26 June 2019 (12:00) (updated 14 February 2020)

LooCipher Ransomware

LooCipher is a newly observed ransomware tool.

CC-3123 Medium

Published Thursday 27 June 2019 (12:00) (updated 14 February 2020)

Kubernetes Releases Security Update

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

CC-3206 Medium

Published Tuesday 10 September 2019 (12:00) (updated 14 February 2020)

Lilocked Ransomware

Lilocked, or Lilu, is a newly observed ransomware targeting Linux-based web servers. As of the time of publication, it has affected almost 7000 servers globally.