Cyber alerts - NHS England Digital

Published Wednesday 17 October 2018 (12:00) (updated 17 February 2020)

Oracle Releases October 2018 Security Bulletin

Oracle has released its Critical Patch Update for October 2018 to address 301 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2091 Medium

Published Thursday 1 March 2018 (12:00) (updated 17 February 2020)

Data Keeper Ransomware

Data Keeper is a new ransomware tool being sold as a service . Similar to Saturn and GandCrab it is offered for free, with the attacker sharing a percentage of the profits with its author.

CC-2089 Medium

Published Thursday 1 March 2018 (12:00) (updated 17 February 2020)

SAML Remote Authentication Vulnerabilities

A series of vulnerabilities have been discovered in services that use Security Assertion Markup Language (SAML), an XML-based language which is most often used for single sign-on services.

CC-2587 Medium

Published Wednesday 8 August 2018 (12:00) (updated 17 February 2020)

Matrix Ransomware

Matrix, also known as Ann, is ransomware tool that has been frequently updated since December 2016.

CC-2564 Medium

Published Thursday 2 August 2018 (12:00) (updated 17 February 2020)

Parasite HTTP Remote Access Trojan

Parasite HTTP is a remote access trojan (RAT) that is sold on underground markets. It steals information and creates a backdoor for remote control of affected devices.

CC-2594 Low

Published Friday 10 August 2018 (12:00) (updated 17 February 2020)

Medtronic CareLink Programmer Vulnerabilities

Medtronic has released a security advisory to address three vulnerabilities in their Carelink 2090 cardiac device programmer. A local attacker could exploit these vulnerabilities to alter passwords or data sent from the programmer to devices.

CC-1957 Medium

Published Wednesday 24 January 2018 (12:00) (updated 17 February 2020)

Crugup Backdoor

First observed in 2014, Crugup is a backdoor and information stealer. It has anti-remediation capabilities and specifically uses Internet Explorer for command and control (C2) communications.

CC-2541 Low

Published Wednesday 18 July 2018 (12:00) (updated 17 February 2020)

King Ouroboros Ransomware

ng Ouroboros is a ransomware tool targeting users in North America and Western Europe.

CC-2471 Low

Published Thursday 7 June 2018 (12:00) (updated 17 February 2020)

Zip Slip Vulnerability

Researchers have discovered a vulnerability that can be exploited to perform a directory traversal attack when a malicious archive file is extracted.

CC-2510 Low

Published Wednesday 27 June 2018 (12:00) (updated 17 February 2020)

Google Releases Update for Chrome

Google has released Chrome version 67.0.3396.99 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system.