Cyber alerts - NHS England Digital

Published Wednesday 12 June 2019 (12:00) (updated 14 February 2020)

Buran Ransomware

First observed in 2019, Buran (sometimes referred to as Vega but not related to the Vega browser spyware) is a ransomware tool targeting Europe and Central Asia.

CC-3104 Medium

Published Wednesday 19 June 2019 (12:00) (updated 14 February 2020)

Exim Mining Worm

A new unnamed worm has been observed exploiting the recently disclosed Exim vulnerability, CVE-2019-10149, to install cryptocurrency miners on affected mail servers.

CC-2962 Medium

Published Thursday 16 May 2019 (12:00) (updated 14 February 2020)

Jokeroo Ransomware-as-a-Service

Jokeroo is a variant of the GandCrab ransomware, recently offered as a service on underground hacking forums and Twitter.

CC-3065 Medium

Published Thursday 16 May 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple Cisco products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2981 Low

Published Monday 18 March 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Updates for Workstation and Horizon

VMware has released security updates to address vulnerabilities affecting Workstation 14 and 15, and Horizon 6 and 7. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2862 Low

Published Thursday 3 January 2019 (12:00) (updated 14 February 2020)

Jemd Ransomware

Jemd is a ransomware tool first seen in December 2018.

CC-3211 Medium

Published Wednesday 11 September 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 77.0.3865.75 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3197 Low

Published Monday 2 September 2019 (12:00) (updated 14 February 2020)

Philips HDI 4000 Ultrasound Platform Vulnerability

Philips have released details of a vulnerability affecting their HDI 4000 Ultrasound system. A remote unauthenticated user could exploit this vulnerability to alter or extract sensitive information from an affected system.

CC-3167 Medium

Published Monday 5 August 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in Cisco Nexus 9000 Series Fabric Switches. An attacker could exploit this vulnerability to take control of an affected system.

CC-3237 Low

Published Wednesday 2 October 2019 (12:00) (updated 14 February 2020)

Nodersok Malware

Nodersok is a newly observed fileless malware targeting users across Western Europe and the USA. Also known as Novter or Divergent, it uses embedded versions of a number of legitimate applications as part of its attack chain.