Cyber alerts - NHS England Digital

CC-1900 Low

Published Thursday 18 January 2018 (12:00) (updated 18 January 2022)

IOHIDeous macOS Kernel Exploit

A vulnerability affecting the IOHIDFamily driver class used in Apple's macOS operating system may allow an unauthorised user to gain administration rights to the kernel.

CC-4018 Information only

Published Tuesday 18 January 2022 (11:30) (updated 18 January 2022)

Authentication Bypass Vulnerability in Zoho ManageEngine Desktop Central and Desktop Central MSP

Zoho releases critical security update to fix an authentication bypass vulnerability in Zoho ManageEngine Desktop Central and Desktop Central MSP

CC-4005 Information only

Published Monday 10 January 2022 (12:26) (updated 18 January 2022)

QNAP Releases NAS Security Statement

An 'Immediate Action' statement concerning QNAP NAS products

CC-4019 Information only

Published Wednesday 19 January 2022 (10:54) (updated 19 January 2022)

VMware Releases Security Update for VMware Workstation and Horizon Client for Windows

Scheduled update addresses denial-of-service vulnerability

CC-4021 High

Published Wednesday 19 January 2022 (05:07) (updated 20 January 2022)

Critical RCE Vulnerability in Windows HTTP Stack

CVE-2022-21907

CC-4017 Information only

Published Tuesday 18 January 2022 (11:13) (updated 20 January 2022)

Microsoft Releases Out-of-Band Security Updates

Out-of-band security updates address multiple issues arising from January 2021 Security Updates.

CC-2011 Medium

Published Thursday 1 February 2018 (12:00) (updated 19 January 2022)

Cisco ASA VPN Vulnerability

Cisco have released details of a vulnerability in their Adaptive Security Appliance (ASA) software that may allow an unauthenticated attacker to remotely execute code on an affected system.

CC-3524 Low

Published Tuesday 30 June 2020 (12:00) (updated 19 January 2022)

Philips Ultrasound Authentication Bypass Vulnerability

CC-2168 Medium

Published Thursday 22 March 2018 (12:00) (updated 19 January 2022)

Cryptocurrency Miner Distributed via Weathermap Plugin

A cryptocurrency miner has been distributed via a PHP tool exploiting a vulnerability in the Weathermap network monitoring tool.

CC-2292 Low

Published Thursday 26 April 2018 (12:00) (updated 19 January 2022)

Apple iOS Trustjacking Vulnerability

A new vulnerability has been discovered with iOS devices which lets you exploit the “WiFi Sync” feature allowing a malicious user unauthorised access to a device wirelessly.