Cyber alerts - NHS England Digital

CC-2046 Low

Published Thursday 15 February 2018 (12:00) (updated 17 February 2020)

Grammarly Plugin Authentication Vulnerability

A vulnerability in the popular Grammarly spell-checking extension for Chrome and Firefox may allow a remote attacker to access user information.

CC-2368 Low

Published Thursday 10 May 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2820 Low

Published Tuesday 4 December 2018 (12:00) (updated 17 February 2020)

EnyBeny Nuclear Ransomware

EnyBeny Nuclear is a ransomware tool first seen in November 2018.

CC-2825 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

Butter Cryptomining Campaign

First observed in 2015, Butter is a cryptocurrency mining campaign that has links to Singapore and Hong Kong. It has previously utilised the XOR.DDOS remote access trojan (RAT)

CC-2533 Medium

Published Tuesday 10 July 2018 (12:00) (updated 17 February 2020)

Vobfus Worm & Beebone Downloader Trojan

Vobfus and Beebone are a combined worm and downloader trojan that use an uncommon self-perpetuating infection mechanism

CC-2641 Low

Published Wednesday 29 August 2018 (12:00) (updated 17 February 2020)

MobeRat Android Remote Access Trojan

MobeRat is a newly observed remote access trojan targeting Android devices. It is being offered " -as-a-service " to affiliates through a number of dark web forums.

CC-2621 Medium

Published Tuesday 21 August 2018 (12:00) (updated 17 February 2020)

Node.js ReDoS Vulnerability

Researchers have disclosed vulnerabilities in the Node.js JavaScript-based runtime.

CC-2519 Low

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

Windows 10 Settings Shortcut Vulnerability

A vulnerability has been uncovered in Microsoft Windows 10 that allows users to create shortcuts that can execute malicious code on the affected machine whilst bypassing security features.

CC-2485 Low

Published Wednesday 13 June 2018 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 67.0.3396.87 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.

CC-2777 Medium

Published Friday 9 November 2018 (12:00) (updated 17 February 2020)

Philips iSite and IntelliSpace PACS Vulnerabilty

Philips have released a security update to address a vulnerability in their iSite and IntelliSpace picture archiving and communication system (PACS) products.