Cyber alerts - NHS England Digital

Published Wednesday 8 April 2020 (12:00) (updated 29 June 2021)

Mozilla Patches Critical Vulnerabilities in Firefox, Firefox ESR

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox Extended Support Release (ESR). An attacker could exploit these vulnerabilities to take control of an affected system. These vulnerabilities have been detected in exploits in the wild.

CC-3508 Low

Published Wednesday 24 June 2020 (12:00) (updated 29 June 2021)

BD Alaris PCU DoS Vulnerability

BD (Becton, Dickinson and Co.) has released details of an uncontrolled resource consumption vulnerability (CWE-400) affecting their Alaris Point-of-Care Unit (PCU) infusion delivery system. A remote unauthenticated attacker could cause a denial-of-service (DoS) condition on an affected device.

CC-3487 Low

Published Thursday 4 June 2020 (12:00) (updated 29 June 2021)

IP-in-IP Invalid Decapsulation Vulnerability

Security researchers have disclosed details of an invalid decapsulation vulnerability affecting the IP Encapsulation within IP (IETF RFC 2003) protocol. An unauthenticated remote attacker could exploit this vulnerability to arbitrarily reroute network traffic through an affected system.

CC-3509 Low

Published Wednesday 24 June 2020 (12:00) (updated 29 June 2021)

Biotronik CardioMessenger Vulnerabilities

Biotronik has released details of a vulnerabilities affecting their CardioMessenger II cardiac implant monitoring products. Attackers with access could exploit these vulnerabilities to obtain patient medical or sensitive data, impair implant functionality, or access connected medical systems.

CC-3506 Information only

Published Thursday 18 June 2020 (12:00) (updated 29 June 2021)

Google Releases Security Updates for Chrome

Google has released Chrome version 83.0.4103.106 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3349 Information only

Published Thursday 23 January 2020 (12:00) (updated 29 June 2021)

Samba Releases Security Updates

The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-3335 Information only

Published Friday 10 January 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in Cisco Webex Video Mesh, Cisco IOS, and Cisco IOS XE Software. A remote attacker could exploit these vulnerabilities to take control of an affected system.

CC-3389 Low

Published Tuesday 10 March 2020 (12:00) (updated 29 June 2021)

Tuyul IRC Botnet

First observed in January 2020, Tuyul is a Perl-based Internet Relay Chat (IRC) botnet targeting a known vulnerability in the PHPUnit testing framework.

CC-3364 Information only

Published Thursday 13 February 2020 (12:00) (updated 29 June 2021)

Microsoft Releases Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system.

CC-3367 Information only

Published Thursday 13 February 2020 (12:00) (updated 29 June 2021)

Dell Releases Security Advisory for Dell SupportAssist

Dell has released a security advisory to address a vulnerability in Dell SupportAssist software. An attacker could exploit this vulnerability to access sensitive information.