Cyber alerts - NHS England Digital

Published Monday 9 March 2020 (12:00) (updated 29 June 2021)

ProLocker Ransomware

ProLocker is ransomware first observed in late 2019 that has targeted local government authorities. Previously known as PwndLocker, it was renamed after its creators altered it to prevent free decryption of affected files.

CC-3402 Information only

Published Wednesday 25 March 2020 (12:00) (updated 29 June 2021)

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 8.7.x and 8.8.x. An attacker could exploit these vulnerabilities to take control of an affected system.

CC-3408 Medium

Published Wednesday 25 March 2020 (12:00) (updated 29 June 2021)

BlackNET Remote Access Trojan

First observed in February 2019, BlackNET is a remote access trojan written in PHP, .NET, and Python. At the time of publication, BlackNET's source code is available through Github, with its author making no attempts to disguise its malicious nature.

CC-3409 Information only

Published Wednesday 25 March 2020 (12:00) (updated 29 June 2021)

Adobe Releases Security Update for Creative Cloud

Adobe has released a security update to address a critical vulnerability in their Creative Cloud desktop application for Windows. An attacker could exploit this vulnerability to arbitrarily delete files.

CC-3386 Information only

Published Thursday 5 March 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 80.0.3987.132 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3439 Medium

Published Thursday 30 April 2020 (12:00) (updated 29 June 2021)

Lockbit Ransomware

Lockbit is a ransomware-as-a-service (RaaS) tool offered through Russian-speaking hacking forums and dark web sites. It has recently undergone rapid changes to incorporate functionality from more well-known RaaS tools such as Sodinokibi and Maze, potentially to compete commercially with these tools.

CC-3328 Information only

Published Wednesday 8 January 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates

Cisco has released security updates to address multiple vulnerabilities in Data Center Network Manager (DCNM). A remote attacker could exploit these vulnerabilities to take control of an affected system. For updates addressing lower severity vulnerabilities see the Cisco Security Advisories webpage.

CC-3338 Information only

Published Wednesday 15 January 2020 (12:00) (updated 29 June 2021)

Microsoft Releases January 2020 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3348 Low

Published Thursday 23 January 2020 (12:00) (updated 29 June 2021)

Fortinet Releases Security Update

Fortinet has released a security update to address a vulnerability in FortiSIEM. A remote attacker could exploit this vulnerability to gain access to an affected system.

CC-3356 Information only

Published Thursday 6 February 2020 (12:00) (updated 29 June 2021)

Sudo Releases Security Update

Sudo have released a security update to address a vulnerability in sudo. An attacker could exploit this vulnerability to take control of an affected system.