Cyber alerts - NHS England Digital

Published Thursday 7 February 2019 (12:00) (updated 14 February 2020)

Qealler Information Stealer

Qealler is a Java-based information stealer that uses the ProGuard obfuscator to evade detection and deploys a Python-based tool to steal credentials.

CC-3273 Low

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

FuxSocy Ransomware

FuxSocy (also known as FuxSocy Encryptor) is newly observed ransomware tool based on the older Cerber malware-as-a-service.

CC-3276 Medium

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

MS-ISAC Releases Advisory on PHP Vulnerabilities

The Multi-State Information Sharing & Analysis Center (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities.

CC-2970 Medium

Published Wednesday 13 March 2019 (12:00) (updated 14 February 2020)

Predator Trojan

First observed in 2018, Predator (also known as Predator the Thief, Predator the Stealer or PTST) is an information stealing trojan sold through several Russian-language dark web forums and Telegram boards.

CC-2965 Low

Published Friday 8 March 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 72.0.3626.121 for Windows, Mac, and Linux. This version addresses a vulnerability that a remote attacker could exploit to take control of an affected system.

CC-3212 Medium

Published Wednesday 11 September 2019 (12:00) (updated 14 February 2020)

Microsoft Releases September 2019 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3199 Medium

Published Thursday 5 September 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3227 Medium

Published Thursday 26 September 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit one of these vulnerabilities to obtain access to sensitive information.

CC-2899 Low

Published Thursday 24 January 2019 (12:00) (updated 14 February 2020)

Pantsdown OpenBMC Code Execution Vulnerability

A security researcher has released details of a code execution vulnerability, known as 'Panstdown', in the OpenBMC baseboard management controller (BMC) firmware.

CC-3031 Low

Published Thursday 18 April 2019 (12:00) (updated 14 February 2020)

Broadcom WiFi Driver Vulnerabilities

Broadcom and CERT/CC have released details of four vulnerabilities in the drivers used in their WiFi chipsets. A remote unauthenticated attacker could exploit these to take control of an affected system.