Cyber alerts - NHS England Digital

Published Thursday 19 April 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2247 Medium

Published Thursday 12 April 2018 (12:00) (updated 17 February 2020)

NetSupport Manager used as Remote Access Trojan

NetSupport Manager, a legitimate remote access tool, has been observed being deployed as a remote access trojan (RAT) in malware campaigns.

CC-2588 Low

Published Thursday 9 August 2018 (12:00) (updated 17 February 2020)

ISC Releases Security Advisory for BIND

The Internet Systems Consortium (ISC) has released a security advisory that addresses a vulnerability affecting multiple versions of the ISC Berkeley Internet Name Domain (BIND) standard.

CC-2694 Low

Published Thursday 27 September 2018 (12:00) (updated 17 February 2020)

SpicyOmelette Remote Access Trojan

SpicyOmelette is a remote access trojan that has been observed as a component of cyber attacks initiated by the Cobalt Advanced Persistent Threat (APT) group.

CC-2048 Medium

Published Thursday 15 February 2018 (12:00) (updated 17 February 2020)

WordPress DoS Vulnerability

A vulnerability in the WordPress content management system could allow a remote unauthenticated attacker to perform denial-of-service (DoS) attacks on sites using it.

CC-1892 Medium

Published Wednesday 3 January 2018 (12:00) (updated 17 February 2020)

Dyre Banking Trojan

Dyre (also known as Dyreza, Dyzap or Dryza) is a banking trojan that targets payroll systems, cryptocurrency and online banking websites.

CC-2699 Low

Published Tuesday 2 October 2018 (12:00) (updated 17 February 2020)

Foxit Releases Security Updates

Foxit have released security updates to address multiple vulnerabilities in their PDF Reader and PhantomPDF products. An unauthenticated, local attacker could exploit these vulnerabilities to execute arbitrary code on an affected device.

CC-2728 Low

Published Monday 15 October 2018 (12:00) (updated 17 February 2020)

IBM WebSphere Application Sever Security Update

IBM has released a security update to address several vulnerabilities in their WebSphere Application Server. A remote unauthenticated attacker could exploit these to execute arbitrary code on an affected system.

CC-2145 Low

Published Thursday 15 March 2018 (12:00) (updated 17 February 2020)

Qwerty Ransomware

Qwerty is ransomware that utilises legitimate free tools to encrypt a user's files.

CC-2340 Low

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

Microsoft Releases Security Update

Microsoft has released a security update to address a vulnerability in the Windows Host Compute Service Shim (hcsshim) library.