Cyber alerts - NHS England Digital

Published Thursday 20 February 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Update

VMware has released security updates to address multiple vulnerabilities in vRealize Operations for Horizon Adapter. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3382 Medium

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Mozart Backdoor

Mozart is a backdoor that targets Microsoft Windows and uses the DNS protocol for command and control (C2) communication.

CC-3370 Information only

Published Thursday 13 February 2020 (12:00) (updated 29 June 2021)

Mozilla Releases Security Updates for Multiple Products

Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3472 Medium

Published Thursday 28 May 2020 (12:00) (updated 29 June 2021)

Thanos Ransomware-as-a-Service

Thanos is a C# based ransomware tool and builder created by the Nosophoros advanced persistent threat for sale through an affiliate program. Whilst sometimes referred to as Hakbit, this name describes a number of ransomware variants understood to have been created using the Thanos builder.

CC-3452 Medium

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Ramsay Trojan

Ramsay is a highly sophisticated information-stealing trojan and associated espionage framework capable of operating on air-gapped systems. First observed in September 2019, it is believed to have been created by or for the Darkhotel advanced persistent threat group.

CC-3477 Information only

Published Thursday 28 May 2020 (12:00) (updated 29 June 2021)

Microsoft Releases Security Update for Edge

Microsoft has released a security update to address a vulnerability in Edge (Chromium-based). A remote attacker could exploit this vulnerability to write files to arbitrary locations and gain elevated privileges.

CC-3455 Information only

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome 

Google has released Chrome version 81.0.4044.138 for Windows, macOS, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3468 Low

Published Thursday 21 May 2020 (12:00) (updated 29 June 2021)

Mandrake Android Spyware

First observed in early 2020, Mandrake is a sophisticated spyware platform and associated support infrastructure used for targeted attacks against finance and commercial organisations in Europe and the USA.

CC-3388 Low

Published Monday 9 March 2020 (12:00) (updated 29 June 2021)

PPP Daemon Buffer Overflow Vulnerability

Security researchers have released details of a buffer overflow (CWE-120) vulnerability affecting the Point-to-Point Protocol (PPP, RFC 1968) daemon (pppd). They claim an unauthenticated remote user could exploit this vulnerability to take control of an affected system.

CC-3412 Information only

Published Thursday 2 April 2020 (12:00) (updated 29 June 2021)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.