Cyber alerts - NHS England Digital

Published Monday 9 September 2019 (12:00) (updated 14 February 2020)

BD Pyxis ES Session Fixation Vulnerability

Becton, Dickinson and Company (BD) has released details of a session fixation vulnerability affecting their Pyxis ES platform.

CC-3225 Medium

Published Tuesday 24 September 2019 (12:00) (updated 14 February 2020)

Microsoft Releases Out-of-Band Security Update

Microsoft has released out-of-band security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2982 Low

Published Monday 18 March 2019 (12:00) (updated 14 February 2020)

Intel Releases Security Advisories on Multiple Products

Intel has released security updates and recommendations to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3150 Medium

Published Tuesday 16 July 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome 75.0.3770.142 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker can exploit to take control of an affected system.

CC-3138 Medium

Published Wednesday 10 July 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Bridge CC, Experience Manager, and Dreamweaver. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-3287 Medium

Published Wednesday 13 November 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3255 Medium

Published Thursday 10 October 2019 (12:00) (updated 14 February 2020)

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to gain an escalation of privileges on a previously infected machine.

CC-2891 Low

Published Wednesday 16 January 2019 (12:00) (updated 14 February 2020)

Djvu Ransomware

First observed in December 2018, Djvu is a new ransomware tool with similarities to the STOP ransomware.

CC-3048 Medium

Published Wednesday 8 May 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Update for Elastic Services Controller

Cisco has released a security update to address a vulnerability in Cisco Elastic Services Controller (ESC). A remote attacker could exploit this vulnerability to take control of an affected system.

CC-3109 Medium

Published Thursday 20 June 2019 (12:00) (updated 14 February 2020)

Oracle Releases Security Advisory for WebLogic

Oracle has released a security alert to address a vulnerability in WebLogic. A remote attacker could exploit this vulnerability to take control of an affected system. This vulnerability was detected in exploits in the wild.