Cyber alerts - NHS England Digital

Published Thursday 5 April 2018 (12:00) (updated 17 February 2020)

Windows Defender Remote Code Execution Vulnerability

A vulnerability in Microsoft's Malware Protection Engine (MMPE) may allow a remote unauthenticated attacker to arbitrarily execute code.

CC-2703 Low

Published Thursday 4 October 2018 (12:00) (updated 17 February 2020)

Apache HTTP Server Vulnerabilities

Ubuntu has released security updates to address multiple vulnerabilities affecting the Apache HTTP Server. A remote attacker could exploit these vulnerabilities.

CC-1895 Medium

Published Thursday 4 January 2018 (12:00) (updated 17 February 2020)

Meltdown CPU Vulnerability

A hardware vulnerability in almost all x86-based central processing units (CPU), referred to as Meltdown, may allow an attacker to gain access to information stored in the kernel.

CC-2795 Low

Published Tuesday 20 November 2018 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 70.0.3538.110 for Windows, Mac, Linux and Android. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.

CC-2571 Low

Published Tuesday 7 August 2018 (12:00) (updated 17 February 2020)

Everbe Ransomware

Everbe is a ransomware tool first seen in 2017.

CC-2494 Medium

Published Friday 15 June 2018 (12:00) (updated 17 February 2020)

Asprox Botnet

First observed in 2008, Asprox is a Windows-based botnet used to perform SQL injection and phishing campaigns. It is also known as Aseljo, Badsrc, Dapato and Dofoil.

CC-2664 Medium

Published Wednesday 12 September 2018 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 69.0.3497.92 for Windows, Mac, and Linux. This version addresses vulnerabilities, one of which an attacker could exploit to take control of an affected system.

CC-2326 Low

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

DASAN GPON Router RCE Vulnerabilities

Two vulnerabilities have been discovered in DASAN Zhone Solutions' Gigabit-capable Passive Optical Network (GPON) routers, which could be exploited by a remote attacker.

CC-2071 Low

Published Thursday 22 February 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2023 Medium

Published Thursday 8 February 2018 (12:00) (updated 17 February 2020)

Smominru and WannaMine Cryptominer Botnets

A new malware has been observed that aims to enrol devices into botnets , known alternatively as Smominru (MyKings) or WannaMine, for the purpose of mining cryptocurrency .