Cyber alerts - NHS England Digital

Published Wednesday 4 March 2020 (12:00) (updated 4 March 2020)

GhostCat Request Injection Vulnerability

A request injection vulnerability in Apache Tomcat that could be remotely exploited to control an affected system.

Published Thursday 8 March 2018 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 65.0.3325.146 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to cause a denial-of-service condition.

CC-2137 Medium

Published Thursday 15 March 2018 (12:00) (updated 17 February 2020)

RedisWannaMine Cryptomining Worm

A new cryptocurrency mining worm has been observed targeting servers using the Redis data structure store. Named RedisWannaMine, it also uses the EternalBlue SMB exploit to propagate.

CC-2082 Medium

Published Thursday 1 March 2018 (12:00) (updated 17 February 2020)

Coldroot Cross-Platform RAT

Coldroot is an open-source, multi-platform remote access trojan (RAT). Initially created to target macOS devices, its source code was posted on the GitHub software repository service in 2016.

CC-2169 Low

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

Hanwha IoT Smart Camera Vulnerabilities

Multiple Vulnerabilities have been found in the Hanwha IoT smart cameras including insecure HTTP protocols, buffer overflows and being able to remotely execute commands with root privileges.

CC-2660 Medium

Published Tuesday 11 September 2018 (12:00) (updated 17 February 2020)

CroniX Cryptocurrency Miner

CroniX is a newly observed cryptocurrency miner exploiting the Apache Struts vulnerability CVE-2018-11776.

CC-2200 Medium

Published Wednesday 4 April 2018 (12:00) (updated 17 February 2020)

GoScanSSH Worm

A new worm , known as GoScanSSH, has been observed targeting publically accessible Linux Secure Shell (SSH) servers.

CC-2301 Medium

Published Wednesday 25 April 2018 (12:00) (updated 17 February 2020)

LG NAS Devices Vulnerability

A vulnerability in the LG network-attached storage (NAS) device allows a remote attacker access by using command injection on the password parameter login page, without authentication.

CC-2835 Low

Published Tuesday 11 December 2018 (12:00) (updated 17 February 2020)

Linux Rabbit Worm

First observed in August 2018, Rabbit (also known as Rabbot) is a Linux-based worm targeting devices in the UK, USA, South Korea and Russia to enrol into a cryptocurrency mining campaign.

CC-2336 Low

Published Wednesday 2 May 2018 (12:00) (updated 17 February 2020)

BD Pyxis Devices Vulnerable to KRACK

A number of Becton Dickinson (BD) medical devices are still vulnerable to the KRACK wireless key re-installation attack. An attacker may exploit this vulnerability.