Cyber alerts - NHS England Digital

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates for Flash Player

Adobe have released updates addressing vulnerabilities in Adobe Flash Player. These vulnerabilities could allow an attacker to perform Remote Code Execution and take control of the affected system.

CC-2446 Low

Published Thursday 31 May 2018 (12:00) (updated 17 February 2020)

WordPress Jetpack Plugin Backdoor

Attackers are exploiting compromised account credentials and the Jetpack plugin to install malicious plugins on WordPress websites.

CC-2412 Low

Published Tuesday 22 May 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address vulnerabilities in Thunderbird. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2392 Low

Published Wednesday 16 May 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Update

VMware has released a security update to address a vulnerability in NSX SD-WAN Edge by VeloCloud. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-2045 Low

Published Thursday 15 February 2018 (12:00) (updated 17 February 2020)

Lenovo WiFi Chip Memory Vulnerability

Two buffer overflow vulnerabilities, CVE-2017-11120 and CVE-2017-11121 , in the Broadcom WiFI controllers used by Lenovo's ThinkPad laptop computers may allow a remote unauthenticated attacker to execute arbitrary code.

CC-2740 Low

Published Monday 22 October 2018 (12:00) (updated 17 February 2020)

openSUSE Releases Security Update for Leap

openSUSE has released an updated kernel for Leap 42.3 to address several vulnerabilities.

CC-2647 Medium

Published Monday 3 September 2018 (12:00) (updated 17 February 2020)

Auth0 XSRF Vulnerability

Auth0 have disclosed a vulnerability in the auth0-aspnet and auth0-aspnet-owin packages. Applications that use these packages may be vulnerable to Cross-Site Request Forgery (XSRF) attacks.

CC-2632 Low

Published Thursday 23 August 2018 (12:00) (updated 17 February 2020)

AppleJeus macOS Malware

AppleJeus is a newly observed trojan malware created by the Hidden Cobra advanced persistent threat group to target macOS devices.

CC-1922 Low

Published Wednesday 10 January 2018 (12:00) (updated 17 February 2020)

Malicious Android App Signs Users up to Premium SMS Services

A malicious app, written in the Kotlin open-source language, has been observed on the Google Play Store.

CC-2551 Low

Published Thursday 26 July 2018 (12:00) (updated 17 February 2020)

Bluetooth Cryptographic Validation Vulnerability

A vulnerability in the way some Bluetooth software implementations validate cryptographic key exchange parameters has been discovered by group of researchers.