Cyber alerts - NHS England Digital

Published Friday 25 January 2019 (12:00) (updated 14 February 2020)

Microsoft Exchange Domain Escalation Vulnerability

A security researcher has disclosed details of a zero-day vulnerability in the Microsoft Exchange mail server.

Published Thursday 12 September 2019 (12:00) (updated 14 February 2020)

PHP Releases Security Update

The PHP group has released security updates to address multiple vulnerabilities in PHP. An attacker could exploit some of these vulnerabilities to take control of an affected system.For further information:MS-ISAC Advisory 2019-087

CC-3141 Low

Published Thursday 11 July 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address a vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software. A remote attacker could exploit this to cause a denial-of-service condition.

CC-3154 Medium

Published Wednesday 17 July 2019 (12:00) (updated 14 February 2020)

Microsoft Releases Security Updates for PowerShell Core

Microsoft has released updates to address a vulnerability in PowerShell Core versions 6.1 and 6.2. An attacker could exploit this vulnerability to take control of an affected system.

CC-3161 Medium

Published Tuesday 23 July 2019 (12:00) (updated 14 February 2020)

Okrum Backdoor

Okrum is a simple backdoor created by the Ke3chang (also known as APT15) advanced persistent threat. First observed in 2016 in campaigns against Eastern European government organisations, Ke3chang now uses Okrum against targets globally.

CC-3143 Low

Published Thursday 11 July 2019 (12:00) (updated 14 February 2020)

Miori IoT Botnet

First observed in 2018 Miori is a Internet-of-Things (IoT) worm and botnet based on the Mirai malware.

CC-3238 Medium

Published Thursday 3 October 2019 (12:00) (updated 14 February 2020)

WhiteShadow Dropper Trojan

First observed in August 2019, White Shadow is a lightweight macro-based dropper trojan used to deliver several well-known malware including Nanocore, FormBook, Agent Tesla, and AzorULT.

CC-3278 Medium

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3076 Low

Published Friday 31 May 2019 (12:00) (updated 14 February 2020)

Nansh0u Cryptomining Campaign

Nansh0u is a cryptocurrency mining campaign that is targeting servers around the world running Microsoft SQL Server and phpMyAdmin.

CC-2978 Low

Published Thursday 14 March 2019 (12:00) (updated 14 February 2020)

Intel Releases Security Update for Graphics Driver

Intel has released security updates to address multiple vulnerabilities in their Graphics Driver for Windows software.