Cyber alerts - NHS England Digital

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

WD My Cloud DLNA Vulnerability

A vulnerability has been identified in Western Digital's MyCloud devices which allows unauthenticated local users full access to the device's contents.

CC-2622 Low

Published Wednesday 22 August 2018 (12:00) (updated 17 February 2020)

USBHarpoon USB-based Attack

Security researchers have created a process for producing malicious USB charging cables. Known as USBHarpoon, it adapts a previous technique for performing USB-based attacks called BadUSB.

CC-2613 Medium

Published Thursday 16 August 2018 (12:00) (updated 17 February 2020)

Office 365 Email PhishPoint Attack

PhishPoint is a new phishing attack method that is estimated to have affected up to 10% of Office 365 users worldwide at the time of publication.

CC-1924 Low

Published Thursday 11 January 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates

VMware has released security updates to address a vulnerability in multiple products. An attacker could exploit this vulnerability to obtain access to sensitive information.

CC-1980 Low

Published Wednesday 31 January 2018 (12:00) (updated 17 February 2020)

RATANKBA RAT

RATANKBA is a remote-access trojan (RAT) believed to have been created by the Lazarus Group advanced persistent threat, also known as HIDDEN COBRA and the Guardians of Peace.

CC-1974 Low

Published Friday 26 January 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update for Thunderbird

Mozilla has released a security update to address multiple vulnerabilities in Thunderbird. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2503 Medium

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

Kardon Loader Trojan

Kardon Loader is a newly observed trojan and downloader believed to be in public beta. It's author has been advertising it on various dark web sites since early 2018, claiming they are in the process of adding numerous new features to it.

CC-2725 Low

Published Monday 15 October 2018 (12:00) (updated 17 February 2020)

NUUO NVRmini2 and NVRsolo Vulnerabilities

NUUO has released security updates to address vulnerabilities in their NVRsolo and NVRmini2 network video recorders (NVR).

CC-2305 Low

Published Thursday 26 April 2018 (12:00) (updated 17 February 2020)

Roaming Mantis Malware

Roaming Mantis is a newly observed spyware tool that uses DNS hijacking to compromise Android devices.

CC-2682 Low

Published Thursday 20 September 2018 (12:00) (updated 17 February 2020)

NUUO Releases Security Updates for Network Video Recorders

NUUO has released security updates to address vulnerabilities in their NVRsolo and NVRmini2 network video recorders (NVR).