Cyber alerts - NHS England Digital

Published Monday 30 September 2019 (12:00) (updated 14 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2911 Low

Published Wednesday 30 January 2019 (12:00) (updated 14 February 2020)

Stryker Medical Beds Vulnerabilities

Stryker have released a security update to address vulnerabilities in their wireless enabled medical bed products. These relate to a vulnerability in WPA2 (Wireless Protected Access 2) known as KRACK (Keyless Re-installation Attack).

CC-2906 Low

Published Monday 28 January 2019 (12:00) (updated 14 February 2020)

Yowai IoT Botnet

Yowai is a newly observed Internet-of-Things (IoT) worm and botnet based on the Mirai malware.

CC-2888 Low

Published Wednesday 16 January 2019 (12:00) (updated 14 February 2020)

Secure Copy Protocol Vulnerabilities

Several vulnerabilities have been identified which affect all implementations of Secure Copy Protocol (SCP). A remote attacker could exploit some of these vulnerabilities to make changes to an affected machine.

CC-2867 Medium

Published Monday 7 January 2019 (12:00) (updated 14 February 2020)

Windows KTM Race Condition Vulnerability

Microsoft have released details of a race condition vulnerability in the Windows Kernel Transaction Manager (KTM), a tool that allows applications to perform resource transactions by making those resources available as kernel objects.

CC-3296 Medium

Published Tuesday 26 November 2019 (12:00) (updated 14 February 2020)

ISC Releases Security Advisory for BIND

The Internet Systems Consortium (ISC) has released a security advisory that addresses a vulnerability affecting multiple versions of ISC Berkeley Internet Name Domain (BIND).

CC-1741 Low

Published Friday 1 November 2019 (12:00) (updated 14 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3119 Low

Published Tuesday 22 October 2019 (12:00) (updated 14 February 2020)

Graboid Worm

Graboid is newly observed cryptocurrency mining worm that uses malicious Docker container images to propagate.

CC-3121 Medium

Published Thursday 27 June 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates for Data Center Network Manager

Cisco has released a security update to address multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) software.

CC-3042 Medium

Published Wednesday 1 May 2019 (12:00) (updated 14 February 2020)

Philips Tasy EMR XSS Vulnerability

Philips have released details of a cross-site-scripting (XSS) vulnerability in their Tasy electronic medical record (EMR) system.