Cyber alerts - NHS England Digital

Published Wednesday 31 October 2018 (12:00) (updated 6 September 2021)

Windows UWP File Access Vulnerability

A vulnerability in Microsoft's Universal Windows Platform (UWP) allows UWP applications full access to a device's file system without user permission. An attacker could exploit this vulnerability to exfiltrate user and system information or cause a denial-of-service condition of an affected application.

CC-2688 Low

Published Thursday 27 September 2018 (12:00) (updated 6 September 2021)

Linux Mutagen Astronomy Vulnerability

A vulnerability in the Linux operating system kernel called Mutagen Astronomy has been disclosed that could allow an attacker to obtain local escalated privileges.

CC-2188 Low

Published Wednesday 28 March 2018 (12:00) (updated 6 September 2021)

SANNY Malware

SANNY is a macro-based malware that is known to be used by a malicious group based out of Korea. The malware is spread via spam and phishing campaigns in a Word document attached to the email and its aim is to extract data of the user’s system.

CC-3934 High

Published Saturday 4 September 2021 (01:54) (updated 6 September 2021)

Atlassian Confluence Critical OGNL Vulnerability

A code injection vulnerability in Confluence Server and Data Center

CC-3795 Low

Published Thursday 18 March 2021 (12:17) (updated 7 September 2021)

BD Alaris Exposed Credential Vulnerabilities

Two vulnerabilities in BD's infusion pump systems

CC-1784 Low

Published Wednesday 15 November 2017 (12:00) (updated 7 September 2021)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Photoshop CC, Adobe Connect, DNG Converter, InDesign, Digital Editions, Shockwave Player, and Experience Manager.

CC-3819 High

Published Tuesday 13 April 2021 (08:30) (updated 7 September 2021)

Microsoft Exchange Server Critical RCE Vulnerabilities

Four remote exploitable vulnerabilities in Microsoft's mail server

CC-2785 Low

Published Wednesday 14 November 2018 (12:00) (updated 7 September 2021)

WebCobra Cryptocurrency Miner

WebCobra is a cryptocurrency miner that deploys two different miner modules depending on the running environment of the device.

CC-3752 Low

Published Friday 12 February 2021 (12:00) (updated 7 September 2021)

Zeoticus Ransomware

Ransomware that operates without a command and control function

CC-3672 Medium

Published Thursday 19 November 2020 (12:00) (updated 7 September 2021)

Jupyter Trojan

A browser infostealer with full backdoor capabilities