Cyber alerts - NHS England Digital

Published Monday 14 January 2019 (12:00) (updated 14 February 2020)

Punisher Remote Access Trojan

First observed in late 2018, Punisher is a modular, .NET-based remote access trojan. Publicly available on several dark web forums, it can be configured with several capabilities according to the user's wishes.

CC-2872 Medium

Published Thursday 10 January 2019 (12:00) (updated 14 February 2020)

Windows DHCP Remote Code Execution Vulnerability

Microsoft have released details of a remote code execution vulnerability in the Windows Dynamic Host Configuration Protocol (DHCP) client.

CC-2914 Medium

Published Thursday 31 January 2019 (12:00) (updated 14 February 2020)

DNS Flag Day 2019

On February 1, 2019, all major Domain Name System (DNS, IETF RFC1035) providers will be updating their products and services to address known techniques to bypass the Extension Mechanisms Protocol for DNS (EDNS), known as DNS Flag Day.

CC-2995 Low

Published Wednesday 27 March 2019 (12:00) (updated 14 February 2020)

ASUS Releases Security Update for Live Update Software

ASUS has released as ecurity update to address a vulnerability in their Live Update utility. A remote unauthenticated attacker could exploit this vulnerability to take control of an affected system.

CC-2987 Low

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

Drupal Releases Security Updates

Drupal has released security updates to address a vulnerability in Drupal Core. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-3064 Low

Published Thursday 16 May 2019 (12:00) (updated 14 February 2020)

Linux Kernel RDS RCE Vulnerability

Security researchers have released details of a race condition vulnerability in the Linux kernel. A remote attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition on an affected device.

CC-2917 Low

Published Wednesday 6 February 2019 (12:00) (updated 14 February 2020)

CookieMiner Trojan

First observed in December 2018, CookieMiner is a cryptocurrency-stealing trojan believed to be based on the DarthMiner mining malware.

CC-3285 Low

Published Monday 11 November 2019 (12:00) (updated 14 February 2020)

Medtronic ValleyLab Generator Authentication Vulnerabilities

Medtronic has released details of several authentication vulnerabilities affecting their ValleyLab electrosurgical platform.

CC-3125 Medium

Published Thursday 27 June 2019 (12:00) (updated 14 February 2020)

Atlassian Release Security Update for Jira

Atlassian have released a security update to address a denial of service vulnerability in Jira when ordering by "Epic Name". A remote attacker could exploit this vulnerability to deny access to the Jira service.

CC-3099 Medium

Published Friday 14 June 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome 75.0.3770.90 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker can exploit to take control of an affected system.