Cyber alerts - NHS England Digital

Published Thursday 14 March 2019 (12:00) (updated 14 February 2020)

Python Unicode Translation Vulnerability

Python.org have released a security update to a address a network translation vulnerability in two Python components. A remote unauthenticated attacker could exploit this vulnerability obtain sensitive information from an affected system.

CC-3292 Low

Published Friday 15 November 2019 (12:00) (updated 14 February 2020)

Philips IntelliBridge Weak Encryption Vulnerability

Philips Healthcare has released details of an inadequate encryption strength (CWE-326) vulnerability affecting several of their IntelliBridge medical device interface system.

CC-3282 Low

Published Tuesday 5 November 2019 (12:00) (updated 14 February 2020)

QSnatch Botnet

QSnatch is a newly observed botnet targeting exposed QNAP network-attached storage (NAS) devices.

CC-2890 Low

Published Wednesday 16 January 2019 (12:00) (updated 14 February 2020)

Oracle Releases January 2019 Security Bulletin

Oracle has released its Critical Patch Update for January 2019 to address 284 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2908 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2880 Medium

Published Monday 14 January 2019 (12:00) (updated 14 February 2020)

ServHelper Backdoor

ServHelper is a newly observed Delphi-based backdoor believed to have been created by the TA505 advanced persistent threat group. It appears to be in active development, with new variants published every few days.

CC-3072 Low

Published Thursday 23 May 2019 (12:00) (updated 14 February 2020)

GetCrypt Ransomware

GetCrypt is a newly observed ransomware being installed on machines compromised with the RIG exploit kit.

CC-3061 Medium

Published Wednesday 15 May 2019 (12:00) (updated 14 February 2020)

Intel Releases Security Updates and Mitigations for Multiple Products

Intel has released security updates and recommendations to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3134 Low

Published Thursday 4 July 2019 (12:00) (updated 14 February 2020)

Godlua Backdoor

Godlua is a newly observed Lua-based backdoor, which leverages the DNS over HTTPS (DoH) protocol to secure its communications.

CC-3098 Medium

Published Friday 14 June 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address vulnerabilities in Thunderbird. An attacker could exploit these vulnerabilities to take control of an affected system.