Cyber alerts - NHS England Digital

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

Hidden Cobra Trojans

A number of new downloader and remote access trojans (RAT) have been observed in campaigns globally. All five identified tools are believed to have been created by the Hidden Cobra advanced persistent threat group for use in their own campaigns.

CC-3380 Low

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Nuke Ransomware

First observed in 2016, Nuke is a ransomware tool targeting organisations globally.

CC-3391 Information only

Published Thursday 12 March 2020 (12:00) (updated 29 June 2021)

Microsoft Releases March 2020 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3449 Low

Published Wednesday 6 May 2020 (12:00) (updated 29 June 2021)

Kaiji IoT Botnet

Kaiji is a Go-based worm and botnet associated with an ongoing campaign targeting exposed Linux servers and Internet-of-Things (IoT) devices. Unusually for IoT malware, Kaiji appears to be entirely bespoke and does not contain any code from more well-known botnets such as Mirai.

CC-3458 Information only

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities affecting Adobe DNG Software Development Kit, Acrobat, and Reader. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3511 Low

Published Wednesday 24 June 2020 (12:00) (updated 29 June 2021)

Baxter Phoenix Information Leakage Vulnerability

Baxter has released details of a cleartext transmission vulnerability (CWE-319) affecting their Phoenix hemodialysis delivery system. they claim that an attacker with local network access could exploit this vulnerability to obtain patient treatment and prescription data.

CC-3441 Information only

Published Thursday 30 April 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 81.0.4044.129 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3422 Information only

Published Friday 17 April 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released new Chrome versions for Windows, macOS and Linux. These versions address multiple vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3421 Low

Published Wednesday 8 April 2020 (12:00) (updated 29 June 2021)

HP Support Assistant Vulnerabilities

Researchers have released details of 10 vulnerabilities in HP's Support Assistant for Microsoft Windows. They claim that an attacker could exploit vulnerabilities to remotely execute code, escalate privileges, or delete local files.

CC-3330 Low

Published Thursday 9 January 2020 (12:00) (updated 29 June 2021)

LiquorBot Botnet

LiquorBot is a newly observed Golang-based botnet, whose sole purpose appears to be mining Monero cryptocurrency.