Cyber alerts - NHS England Digital

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit some of these vulnerabilities to obtain sensitive information.

CC-3261 Medium

Published Thursday 17 October 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address vulnerabilities in multiple Adobe products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3174 Medium

Published Monday 12 August 2019 (12:00) (updated 14 February 2020)

Saefko Remote Access Trojan

First observed in 2019, Saefko is a .NET remote access trojan (RAT), targeting Windows and Android devices. It is available for purchase on several dark web sites and hacking forums.

CC-3001 Low

Published Monday 1 April 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2984 Low

Published Wednesday 20 March 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3059 Medium

Published Wednesday 15 May 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3131 Medium

Published Wednesday 3 July 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Advisory for Multiple Products

VMware has released a security advisory to address vulnerabilities affecting multiple products. An attacker could exploit these vulnerabilities to cause a denial-of-service condition.

CC-3127 Medium

Published Wednesday 3 July 2019 (12:00) (updated 14 February 2020)

Greenflash Sundown Exploit Kit

First observed in 2015, Greenflash Sundown (also known as Greenflash or GS) is an advanced exploit kit used in the ShadowGate malware campaign.

CC-2868 Medium

Published Tuesday 8 January 2019 (12:00) (updated 14 February 2020)

Windows DNS Server Heap Overflow Vulnerability

Microsoft have released details of a buffer overflow vulnerability in the Windows DNS server. An unauthenticated remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition on an affected device.

CC-1743 Low

Published Friday 1 November 2019 (12:00) (updated 14 February 2020)

Android LokiBot Variant Turns Into Faulty Ransomware

There is a new variant of the LokiBot banking trojan targeting Android devices, which attempts to encrypt files and lock the device when a user attempts to remove it.