Cyber alerts - NHS England Digital

Published Wednesday 21 November 2018 (12:00) (updated 17 February 2020)

Cannon Downloader Trojan

Cannon is a newly observed dropper trojan, believed to have been created by APT28 advanced persistent threat group (also known as Fancy Bear).

CC-2814 Medium

Published Wednesday 28 November 2018 (12:00) (updated 17 February 2020)

sLoad Downloader

First observed in January 2017, sLoad (also known as SnatchLoader) is a PowerShell-based downloader trojan targeting organisations throughout Western Europe and North America.

CC-2766 Medium

Published Tuesday 6 November 2018 (12:00) (updated 17 February 2020)

PortSmash Intel CPU Side-Channel Vulnerability

Researchers have developed a new side-channel attack called PortSmash which takes advantage of a vulnerability in Intel central processing units (CPUs) with simultaneous multi-threading (SMT) enabled.

CC-2760 Low

Published Thursday 1 November 2018 (12:00) (updated 17 February 2020)

Apache Releases Security Update for Apache Tomcat JK Connectors

The Apache Software Foundation has released a security update to address a vulnerability affecting Apache Tomcat JK Connectors 1.2.0 to 1.2.44. A remote attacker could exploit this vulnerability to obtain access to sensitive information.

CC-2633 Low

Published Friday 24 August 2018 (12:00) (updated 17 February 2020)

BD Alaris Plus Medical Pump Vulnerability

A remote attacker could exploit this vulnerability to impact the functionality of affected devices when they are connected to a terminal server using the serial port.

CC-2639 Medium

Published Wednesday 29 August 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Update

A vulnerability in Cisco's Data Center Network Manager (DCNM) software could allow an authenticated, remote attacker to conduct directory traversal attacks and gain access to sensitive files on the targeted system.

CC-2070 Low

Published Thursday 22 February 2018 (12:00) (updated 17 February 2020)

Rapid Ransomware

Rapid is ransomware that is spread via spam emails that falsely claim to be from public authorities.

CC-2687 Medium

Published Wednesday 26 September 2018 (12:00) (updated 17 February 2020)

Apple Releases Security Update for macOS Mojave

Apple has released a security update to address multiple vulnerabilities in macOS Mojave 10.14. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2748 Low

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

TimpDoor Android Proxy Malware

First observed in March 2018, TimpDoor is an Android-based malware that is used to create a proxy server on affected devices.

CC-2847 Low

Published Tuesday 18 December 2018 (12:00) (updated 17 February 2020)

Medtronic Release Security Advisory

Medtronic has released a security advisory that addresses a vulnerability affecting their cardiac implantable programmers.