Cyber alerts - NHS England Digital

Published Tuesday 2 June 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates for CML and VIRL-PE

Cisco has released updates to address two SaltStack Framework vulnerabilities affecting their Modelling Labs, Corporate Ed. (CML) and Virtual Internet Routing Lab, Personal Ed. (VIRL-PE) products. A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

CC-3500 Low

Published Thursday 11 June 2020 (12:00) (updated 29 June 2021)

Zorab Ransomware

Zorab is newly-observed ransomware that is disguised as a decryption tool for STOP (also known as Djvu) ransomware, but actually performs a further encryption on affected files.

CC-3475 Information only

Published Thursday 28 May 2020 (12:00) (updated 29 June 2021)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3460 Information only

Published Thursday 21 May 2020 (12:00) (updated 29 June 2021)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to obtain sensitive information.

CC-3435 Low

Published Thursday 23 April 2020 (12:00) (updated 29 June 2021)

CoronaLocker Trojan

CoronaLocker is a newly observed trojan apparently designed to inconvenience users instead of causing damage.

CC-3416 Information only

Published Thursday 2 April 2020 (12:00) (updated 29 June 2021)

OpenWrt Releases Security Update

OpenWrt has released a security update to address a vulnerability in the Opkg module of their operating system. A remote unathenticated attacker could exploit this to execute arbitrary code on an affected system.

CC-3425 Low

Published Friday 17 April 2020 (12:00) (updated 29 June 2021)

Dark Nexus IoT Botnet

Dark Nexus (stylised as dark_nexus) is a newly observed botnet for use in distributed denial-of-service (DDoS) attacks. It can target a wide variety of Internet-of-Things (IoT) microarchitectures including ARM, MIPS, PowerPC, and x86; and seems to contain large amounts of Mirai and Qbot code.

CC-3393 Information only

Published Thursday 12 March 2020 (12:00) (updated 29 June 2021)

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3366 Information only

Published Thursday 13 February 2020 (12:00) (updated 29 June 2021)

Google Releases Security Update for Android

Google has released a security update to address multiple vulnerabilities in their Android mobile operating system. They claim an attacker could exploit some or all of these vulnerabilities to take control of an affected device.

CC-3341 Information only

Published Wednesday 15 January 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Update

VMware has released a security update to address a vulnerability in VMware Tools. An attacker could exploit this vulnerability to take control of an affected system.