Cyber alerts - NHS England Digital

Published Thursday 4 April 2019 (12:00) (updated 14 February 2020)

Kubernetes Releases Security Updates

Kubernetes has released a security update to address a directory traversal vulnerability in the kubectl cp command. A local unauthenticated attacker could exploit this vulnerability to copy or alter files on an affected system.

CC-3023 Low

Published Monday 15 April 2019 (12:00) (updated 14 February 2020)

Apache Releases Security Updates for Apache Tomcat

The Apache Software Foundation has released Apache Tomcat versions 7.0.94 and 8.5.40 to address a vulnerability. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-3294 Medium

Published Wednesday 20 November 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome 78.0.3904.108 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-2944 Low

Published Thursday 21 February 2019 (12:00) (updated 14 February 2020)

Drupal Releases Security Update

Drupal has released a security update a to address a vulnerability in Drupal core. A remote unauthenticated attacker could exploit this vulnerability to execute arbitrary code on an affected system.

CC-3145 Low

Published Thursday 11 July 2019 (12:00) (updated 14 February 2020)

Juniper Networks Releases Multiple Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in various products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3128 Low

Published Wednesday 3 July 2019 (12:00) (updated 14 February 2020)

CrescentCore Mac Trojan

CrescentCore is a newly observed trojan targeting Mac devices worldwide.

CC-2876 Low

Published Thursday 10 January 2019 (12:00) (updated 14 February 2020)

systemd Privilege Escalation Vulnerabilities

Security researchers have found vulnerabilities in systemd that allow an authenticated attacker to escalate privileges and cause a system service to crash.

CC-2915 Low

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

LockerGoga Ransomware

LockerGoga is a newly observed ransomware tool targeting businesses throughout Western Europe

CC-3063 Medium

Published Wednesday 15 May 2019 (12:00) (updated 14 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3089 Medium

Published Wednesday 12 June 2019 (12:00) (updated 14 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities affecting ColdFusion, Adobe Campaign, and Adobe Flash Player. An attacker could exploit some these vulnerabilities to take control of an affected system.