Cyber alerts - NHS England Digital

Published Wednesday 6 May 2020 (12:00) (updated 29 June 2021)

EventBot Trojan

EventBot is a newly observed trojan primarily targeting European banking, financial, and cryptocurrency applications.

Published Thursday 23 April 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3431 Information only

Published Thursday 23 April 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 81.0.4044.122 for Windows, macOS, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3381 Low

Published Thursday 27 February 2020 (12:00) (updated 29 June 2021)

Kr00k WPA2 Vulnerability

Researchers have disclosed details of the Kr00k vulnerability, affecting Wi-Fi Protected Access II (WPA2, IEEE 802.11i-2004) wireless security protocol and how it’s implemented in Broadcom and Cypress wireless chipsets. It can be exploited to decrypt communications sent to and from affected systems.

CC-3357 Information only

Published Thursday 6 February 2020 (12:00) (updated 29 June 2021)

Realtek Releases Security Update

Realtek has released information about a vulnerability in the Realtek HD Audio Driver Package. An attacker could exploit this vulnerability to take control of an affected system.

CC-3358 Information only

Published Thursday 6 February 2020 (12:00) (updated 29 June 2021)

Adobe Releases Security Updates for Magento

Adobe has released security updates to address vulnerabilities affecting Magento Commerce, Community, Enterprise, and Open Source editions. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3371 Low

Published Wednesday 19 February 2020 (12:00) (updated 29 June 2021)

Spacelabs XTR & Arkon BlueKeep Vulnerability

SpaceLabs has confirmed that their Xhibit Telemetry Receiver and Arkon anaesthesia delivery system are affected by the BlueKeep RDP vulnerability. They claim that a remote unauthenticated user could exploit this vulnerability to gain control of affected systems.

CC-3516 Low

Published Thursday 25 June 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Updates

VMware has released security updates to address multiple vulnerabilities in VMware ESXi, Workstation, Fusion, and Cloud Foundation. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3350 Low

Published Thursday 23 January 2020 (12:00) (updated 29 June 2021)

Internet Explorer RCE Vulnerability

Microsoft has released a security advisory to address a critical remote code execution (RCE) vulnerability in Internet Explorer. A remote, unauthenticated user could exploit this vulnerability to take control of an affected system.

CC-3343 Medium

Published Thursday 16 January 2020 (12:00) (updated 29 June 2021)

CurveBall Windows Spoofing Vulnerability

Microsoft has released details of a cryptographic vulnerability in Windows 10 and Windows Server 2016 or 2019 that allows a threat actor to impersonate trusted providers.