Cyber alerts - NHS England Digital

Published Thursday 28 May 2020 (12:00) (updated 29 June 2021)

Ketrum Backdoor

Ketrum is a newly observed backdoor developed by the Ke3chang advanced persistent threat group for use in their own campaigns. Believed to be created from two of the older tools, Ketrican and Okrum, it has been used attacks against European government organisations.

CC-3454 Medium

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Hidden Cobra Trojans: COPPERHEDGE, PEBBLEDASH, and TAINTEDSCRIBE

Three new trojans believed to have been created the Hidden Cobra advanced persistent threat group have been observed.

CC-3373 Medium

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

Parallax Remote Access Trojan

First observed in December 2019, Parallax is an MASM-based remote access trojan sold through a number of hacking forums, with its creators offering a number of additional support services as well as bespoke development based on affiliate feedback.

CC-3378 Information only

Published Monday 24 February 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 80.0.3987.116 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3502 Low

Published Thursday 11 June 2020 (12:00) (updated 29 June 2021)

Avaddon Ransomware

Avaddon is a newly observed ransomware tool offered for sale on dark web forums.

CC-3490 Information only

Published Wednesday 10 June 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 83.0.4103.97 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3504 Low

Published Thursday 18 June 2020 (12:00) (updated 29 June 2021)

Ripple20 Network Vulnerabilities

Researchers have disclosed details of 19 vulnerabilities, referred to as Ripple20, affecting the Track TCP/IP network stack. A remote unauthenticated attacker could exploit these vulnerabilities to execute arbitrary code, extract sensitive data or cause a denial-of-service condition.

CC-3485 Information only

Published Wednesday 3 June 2020 (12:00) (updated 29 June 2021)

Apple Releases Security Updates

Apple has released security updates to address a vulnerability in multiple products. An attacker could exploit this vulnerability to take control of an affected system.

CC-3417 Medium

Published Thursday 2 April 2020 (12:00) (updated 29 June 2021)

Zoom Path Injection Vulnerability

Security researchers have disclosed details of a path injection vulnerability in the Zoom remote conferencing client for Microsoft Windows. They claim a remote unauthenticated meeting attendee can exploit this vulnerability to obtain other attendee's usernames and NTLM credential hashes.

CC-3353 Low

Published Monday 27 January 2020 (12:00) (updated 29 June 2021)

GE Healthcare ApexPro, CARESCAPE, and CIC Vulnerabilities

GE Healthcare has released details of vulnerabilities affecting their ApexPro, CARESCAPE, and Clinical Information Center (CIC) patient monitoring products. They claim an unauthenticated user on the same network could take control, obtain SSH private keys, or alter diagnostic and monitoring data.