Cyber alerts - NHS England Digital

Published Tuesday 19 March 2019 (12:00) (updated 14 February 2020)

JNEC.a Ransomware

JNEC.a is a newly observed ransomware tool exploiting a recently disclosed arbitrary code execution in the WinRAR archiving tool.

CC-2926 Medium

Published Wednesday 13 February 2019 (12:00) (updated 14 February 2020)

TLS Oracle Attack Vulnerabilities

Security researchers have released details of several RSA encryption vulnerabilities in the Transport Layer Security (TLS) protocol. They claim these vulnerabilities could be exploited to perform Bleichenbacher-style oracle attacks.

CC-2934 Low

Published Wednesday 13 February 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2921 Low

Published Thursday 7 February 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2843 Low

Published Thursday 3 January 2019 (12:00) (updated 14 February 2020)

wget Password Exposure Vulnerability

A vulnerability has been discovered in the GNU Project's wget file transfer utility. A local authenticated user could exploit this vulnerability to obtain sensitive information.

CC-3110 Medium

Published Thursday 20 June 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3105 Medium

Published Wednesday 19 June 2019 (12:00) (updated 14 February 2020)

TP-Link Releases Security Updates for Multiple Wi-Fi Extender Models

TP-Link has released firmware updates to address a vulnerability affecting multiple Wi-Fi Extender models. A remote attacker could exploit this vulnerability to remotely execute code on the affected device.

CC-3213 Medium

Published Wednesday 11 September 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting Flash Player and Application Manager. An attacker could exploit these vulnerabilities to take control of an affected system.

CC-3229 Medium

Published Thursday 26 September 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates for ColdFusion

Adobe has released security updates to address vulnerabilities in ColdFusion. An attacker could exploit these vulnerabilities to execute arbitrary code on an affected system.

CC-3298 Medium

Published Thursday 28 November 2019 (12:00) (updated 14 February 2020)

DePriMon Downloader Trojan

First observed in March 2017, DePriMon (Default Print Monitor) is an advanced fileless downloader believed to be associated with the Lamberts (also known as ColoredLamberts or Longhorn) advanced persistent threat group.