Cyber alerts - NHS England Digital

CC-1950 Low

Published Friday 19 January 2018 (12:00) (updated 17 February 2020)

Lenovo Releases Security Advisory

Lenovo has released security updates to address a vulnerability affecting Enterprise Network Operating System (ENOS) firmware. An attacker could exploit this vulnerability to obtain sensitive information.

CC-1966 Low

Published Thursday 25 January 2018 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 64.0.3282.119 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to cause a denial-of-service condition.

CC-1961 Low

Published Wednesday 24 January 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2830 Medium

Published Thursday 6 December 2018 (12:00) (updated 17 February 2020)

EternalSilence UPnP Exploit

EternalSilence is a newly observed attack methodology that targets routers with vulnerable implementations of Universal Plug and Play (UPnP), specifically those that expose their Internet Gateway Device (IGD) controls to the Internet.

CC-2559 Low

Published Thursday 2 August 2018 (12:00) (updated 17 February 2020)

IBM WebSphere Application Server Interim Security Update

IBM has issued an interim security update to address a vulnerability in the IBM WebSphere Application Server using malformed SAML responses from the SAML identity provider which could allow a remote attacker to obtain sensitive information.

CC-2063 Medium

Published Wednesday 21 February 2018 (12:00) (updated 17 February 2020)

Saturn Ransomware

Saturn is a newly observed ransomware tool being delivered through a malware-as-a-service affiliate program that provides attackers with the malware binary for free in exchange for a portion (up to 30%) of the resulting payments.

CC-2737 Low

Published Thursday 18 October 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address multiple vulnerabilities affecting Cisco products. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2811 Low

Published Wednesday 28 November 2018 (12:00) (updated 17 February 2020)

Rotexy Android Trojan

First observed in 2014, Rotexy is a modular, Android-based trojan. Originally functioning as a simple information stealer, it has undergone significant improvements over time to add new capabilities.

CC-2789 Low

Published Wednesday 14 November 2018 (12:00) (updated 17 February 2020)

Microsoft Releases November 2018 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2781 Low

Published Monday 12 November 2018 (12:00) (updated 17 February 2020)

Adobe ColdFusion Backdoor Installation Attack

An unknown advanced persistent threat group has been observed targeting unpatched Adobe ColdFusion servers to install a version of the China Chopper backdoor .