Cyber alerts - NHS England Digital

Published Thursday 13 July 2017 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates that address a vulnerability in all versions of Samba from 4.0.0 onward using embedded Heimdal Kerberos. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-1795 Medium

Published Thursday 16 November 2017 (12:00) (updated 17 February 2020)

ALMA Communicator – DNS Tunneling Trojan

ALMA Communicator is a backdoor trojan created by the state-sponsored OilRig group that uses DNS tunnelling to receive commands and exfiltrate data.

CC-1777 Low

Published Tuesday 14 November 2017 (12:00) (updated 17 February 2020)

Linux USB Subsystem Vulnerabilities

Fourteen vulnerabilities have been found to be affecting the USB subsystem on Linux. The vulnerabilities affect all Linux devices with USB ports.

CC-1456 Medium

Published Thursday 8 June 2017 (12:00) (updated 17 February 2020)

VMware Releases vSphere Data Protection Security Updates

VMware has released security updates to address vulnerabilities in vSphere Data Protection. Exploitation of these vulnerabilities can allow a remote attacker to take control of an affected system.

CC-1225 Medium

Published Thursday 2 March 2017 (12:00) (updated 17 February 2020)

Impact of Microsoft Delayed Patch Tuesday Increases

Microsoft has delayed their regular monthly patch Tuesday release meaning 3 vulnerabilities have been left unpatched.

CC-1377 Low

Published Wednesday 3 May 2017 (12:00) (updated 17 February 2020)

Intel Firmware Vulnerability

Intel has released recommendations to address a vulnerability in the firmware several Intel products.

CC-3436 High

Published Monday 27 April 2020 (12:00) (updated 1 May 2020)

Sophos XG Firewall SQL Injection Vulnerability

Sophos has released details of an SQL injection zero day vulnerability affecting their XG Firewall product series. They claim that an unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code or extract sensitive information

CC-3496 High

Published Thursday 11 June 2020 (12:00) (updated 16 June 2020)

SMBleed SMBv3 Client/Server Information Disclosure Vulnerability

A kernel memory leakage vulnerability affecting SMBv3 in Windows 10 and Windows Server 2019.

3390 High

Published Wednesday 11 March 2020 (12:00) (updated 16 June 2020)

SMBGhost SMBv3 Remote Code Execution Vulnerability

A wormable remote code execution vulnerability affecting Windows 10 and Windows Server 2019

CC-2036 Low

Published Tuesday 13 February 2018 (12:00) (updated 23 June 2020)

Windows Defender CFA Bypassed

A new Windows Defender security feature included in the Windows 10 Fall Creators Update, intended to provide additional protection against ransomware , appears to have been bypassed.