Cyber alerts - NHS England Digital

Published Wednesday 15 May 2019 (12:00) (updated 14 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address a vulnerability in Samba. An attacker could exploit this vulnerability take control of an affected system.

CC-3067 Medium

Published Tuesday 21 May 2019 (12:00) (updated 14 February 2020)

Microsoft SharePoint Server RCE Vulnerability

The National Cyber Security Centre (NCSC) has released an alert following a trend of attacks against UK organisations using a remote code execution (RCE) vulnerability in Microsoft SharePoint Server.

CC-3045 Low

Published Thursday 2 May 2019 (12:00) (updated 14 February 2020)

Email Client Spoofing Vulnerabilities

Security researchers have released details of several vulnerabilities in various implementations of the OpenPGP and S/MIME email encryption standards.

CC-3075 Medium

Published Thursday 30 May 2019 (12:00) (updated 14 February 2020)

ProtonBot Dropper Trojan

First observed in early 2019, ProtonBot is a modular C++ based dropper offered for sale on several dark web sites.

CC-3262 Medium

Published Thursday 17 October 2019 (12:00) (updated 14 February 2020)

WordPress Releases Security Update

WordPress 5.2.3 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-3218 Medium

Published Monday 16 September 2019 (12:00) (updated 14 February 2020)

InnfiRAT Remote Access Trojan

First observed in August 2019, InnfiRAT is a .NET-based remote access trojan primarily targeting cryptocurrency wallet data and related financial information.

CC-2901 Low

Published Thursday 24 January 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3288 Medium

Published Wednesday 13 November 2019 (12:00) (updated 14 February 2020)

Intel Releases Security Updates

Intel has released security updates to address vulnerabilities in multiple products.

CC-3096 Low

Published Thursday 13 June 2019 (12:00) (updated 14 February 2020)

Ebury Backdoor

Ebury is a Secure Shell (SSH) backdoor that has been used in a credential stealing campaign called Operation Windigo. Ebury targets Linux and FreeBSD servers running OpenSSH and has been under development since 2011.

CC-3151 Low

Published Thursday 18 July 2019 (12:00) (updated 14 February 2020)

Extenbro DNS Trojan

First observed in early 2019, Extenbro is a trojan used in adware campaigns to alter user's Domain Name Server (DNS) settings.