Cyber alerts - NHS England Digital

Published Monday 15 July 2019 (12:00) (updated 14 February 2020)

SilentBrute Trojan

First observed in 2013, SilentBrute (also known as SilentBruter) is a multi-platform brute-force trojan written in Go.

Published Thursday 4 July 2019 (12:00) (updated 14 February 2020)

Mac Backdoors Leveraging Firefox Zero-Day Vulnerability

New variants of two backdoors, Netwire and Mokes, have been observed leveraging a zero-day vulnerability in the Mozilla Firefox web browser to infect macOS devices.

CC-3279 Medium

Published Thursday 31 October 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Update for VeloCloud Orchestrator

VMware has released an update to address an information disclosure vulnerability in their SD-WAN by VeloCloud platform. A local authorised user could exploit this vulnerability to retrieve sensitive information.

CC-3236 Low

Published Thursday 3 October 2019 (12:00) (updated 14 February 2020)

Masad Stealer Trojan

Masad Stealer is a newly observed information stealing trojan believed to based in the older Qulab malware. It is actively offered on numerous hacking forums in both free and paid tiers.

CC-3217 Low

Published Tuesday 17 September 2019 (12:00) (updated 14 February 2020)

NetCAT CPU Vulnerability

Security researchers have disclosed details of a hardware vulnerability and corresponding side-channel attack in all Intel server-grade central processing units (CPUs) since 2012, named Network Cache ATtack or NetCAT.

CC-2943 Low

Published Thursday 21 February 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3080 Medium

Published Tuesday 4 June 2019 (12:00) (updated 14 February 2020)

BlackSquid Backdoor

First observed in May 2019, BlackSquid is an advanced modular backdoor primarily targeting financial and governmental organisations globally.

CC-3113 Medium

Published Monday 24 June 2019 (12:00) (updated 14 February 2020)

Apache Releases Security Advisory for Apache Tomcat

Apache has released a security advisory to address a vulnerability in Apache Tomcat. An attacker could exploit this vulnerability to cause a denial-of-service condition.

CC-2892 Low

Published Thursday 17 January 2019 (12:00) (updated 14 February 2020)

Drupal Releases Security Updates

Drupal has released security updates addressing vulnerabilities in Drupal 7.x, 8.5.x, and 8.6.x. A remote attacker could exploit these vulnerabilities to take control of an affected system.

CC-2960 Low

Published Tuesday 5 March 2019 (12:00) (updated 14 February 2020)

Google Releases Security Update for Android

Google has released a security update to address multiple vulnerabilities in their Android mobile operating system. An attacker could exploit some or all of these vulnerabilities to take control of affected devices.