Cyber alerts - NHS England Digital

Published Thursday 11 April 2019 (12:00) (updated 14 February 2020)

DragonBlood WPA3 WiFi Vulnerabilities

Security researchers have disclosed details of multiple vulnerabilities in the WPA3 WiFi protocol, collectively named DragonBlood. They claim in their research paper that an attacker within wireless range may be able to crack network passwords and intercept encrypted communications.

CC-2961 Low

Published Wednesday 6 March 2019 (12:00) (updated 14 February 2020)

Google Chrome RCE Vulnerability

A security researcher has identified a use-after-free vulnerability in Google Chrome. An attacker could exploit this vulnerability to take control of an affected system.

CC-2993 Low

Published Tuesday 26 March 2019 (12:00) (updated 14 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3058 Medium

Published Wednesday 15 May 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vCenter Server, ESXi, Workstation, and Fusion. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2953 Low

Published Wednesday 27 February 2019 (12:00) (updated 14 February 2020)

OpenSSL Releases Security Update

OpenSSL version 1.0.2r has been released to address a vulnerability for users of versions 1.0.2–1.0.2q. An attacker could exploit this vulnerability to obtain sensitive information.

CC-2895 Low

Published Wednesday 6 February 2019 (12:00) (updated 14 February 2020)

TheMoon IoT Botnet

First observed in 2014, TheMoon is a modular Internet-of-Things (IoT) botnet targeting vulnerable routers within broadband networks.

CC-3135 Low

Published Tuesday 9 July 2019 (12:00) (updated 14 February 2020)

Golang Mining Worm Targeting Linux Servers

A new unnamed Golang based worm has been observed targeting Linux servers. The worm installs a cryptocurrency miner and attempts to spread to other systems.

CC-3241 Low

Published Thursday 3 October 2019 (12:00) (updated 14 February 2020)

Banjori Banking Trojan

First observed in 2013, Banjori is a banking trojan targeting users throughout Western Europe and the USA.

CC-3101 Low

Published Wednesday 19 June 2019 (12:00) (updated 14 February 2020)

Echobot Botnet

Echobot is a newly observed botnet based upon the source code of Mirai. Like Mirai, Echobot primarily targets IoT devices but can target other platforms including web servers and private data centres.

CC-3112 Medium

Published Monday 24 June 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates for AirPort 802.11n Wi-Fi Base Stations

Apple has released security updates to address vulnerabilities in AirPort Express, AirPort Extreme, and AirPort Time Capsule wireless routers with 802.11n.