Cyber alerts - NHS England Digital

Published Tuesday 25 February 2020 (12:00) (updated 29 June 2021)

ObliqueRAT Remote Access Trojan

ObliqueRAT is a newly observed remote access trojan targeting diplomatic and governmental organisations. Despite operating primarily throughout Southeast Asia, it has begun to appear in campaigns in Central and Western Europe.

CC-3363 Medium

Published Thursday 13 February 2020 (12:00) (updated 29 June 2021)

KBOT Virus

First observed in early 2020, KBOT is a polymorphic virus that exfiltrates financial and credential data from affected systems. As of the time of publication, it appears to be the first new virus observed in the wild in several years.

CC-3451 Medium

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Dark Crystal Remote Access Trojan

First observed in early 2020, Dark Crystal (also known as DCRat) is an advanced C# and .NET based remote access trojan.

CC-3428 Information only

Published Friday 17 April 2020 (12:00) (updated 29 June 2021)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3433 Information only

Published Thursday 23 April 2020 (12:00) (updated 29 June 2021)

OpenSSL Releases Security Update

OpenSSL version 1.1.1g has been released to address a vulnerability affecting versions 1.1.1d–1.1.1f. An attacker could exploit this vulnerability to cause a denial-of-service condition.

CC-3423 Information only

Published Friday 17 April 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vCenter Server 6.7 and vRealize Log Insight. A remote attacker could exploit the vulnerability to take control of an affected system.

CC-3414 Information only

Published Thursday 2 April 2020 (12:00) (updated 29 June 2021)

DrayTek Releases Security Updates for Multiple Products

DrayTek has released updates to address a vulnerability affecting several of their small business networking products. An attacker could exploit these vulnerabilities to take control of an affected system. These vulnerabilities were detected in exploits in the wild.

CC-3440 Information only

Published Thursday 30 April 2020 (12:00) (updated 29 June 2021)

Juniper Releases Security Updates for Junos OS

Juniper has released security updates to address a vulnerability affecting multiple versions of Junos operating systems. A remote attacker can exploit this vulnerability to take control of an affected system.

CC-3415 Low

Published Thursday 2 April 2020 (12:00) (updated 29 June 2021)

BD Pyxis MedStation and Pyxis Anesthesia Improper Access Vulnerability

BD has released details of a protection mechanism failure vulnerability affecting their MedStation ES and Anesthesia ES automated dispensing systems. They claim that a physical user could exploit this vulnerability to escape restricted environments.

CC-3486 Medium

Published Thursday 4 June 2020 (12:00) (updated 29 June 2021)

ShellReset Remote Access Trojan

ShellReset is a newly observed .NET remote access trojan believed to be based on the older Quasar malware.