Cyber alerts - NHS England Digital

Published Thursday 24 October 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 78.0.3904.70 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-3263 Low

Published Thursday 17 October 2019 (12:00) (updated 14 February 2020)

VMware Releases Security Update for Harbor Container Registry for PCF

VMware has released a security update to address a vulnerability affecting Harbor Container Registry for Pivotal Cloud Foundry (PCF). An attacker could exploit this vulnerability to take control of an affected system.

CC-2861 Low

Published Wednesday 2 January 2019 (12:00) (updated 14 February 2020)

Guardzilla IoT Surveillance Bypass Vulnerability

Security researchers have disclosed details of a password bypass vulnerability in Guardzilla's All-In-One Video Security System products.

CC-2877 Low

Published Friday 11 January 2019 (12:00) (updated 14 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in Cisco Webex Business Suite. An unauthenticated, remote attacker could exploit these vulnerabilities to conduct a cross-site scripting (XSS) attack.

CC-2975 Low

Published Thursday 14 March 2019 (12:00) (updated 14 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 73.0.3683.75 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker could exploit to take control of an affected system.

CC-2988 Medium

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

SQLRat Remote Access Trojan

SQLRat is a remote access trojan (RAT) targeting Windows devices created by the advanced persistent threat group, FIN7. It is distributed via malicious attachments in phishing emails and can compromise an affected device.

CC-3166 Low

Published Wednesday 31 July 2019 (12:00) (updated 14 February 2020)

Urgent/11 VxWorks RTOS Vulnerabilities

Security researchers have disclosed eleven vulnerabilities, collectively named Urgent/11, affecting Wind River's VxWorks real-time operating system (RTOS).

CC-3192 Medium

Published Wednesday 28 August 2019 (12:00) (updated 14 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3088 Medium

Published Wednesday 12 June 2019 (12:00) (updated 14 February 2020)

GoldBrute Worm

GoldBrute is a newly observed worm targeting exposed Remote Desktop Protocol (RDP) servers worldwide for enrolment into a botnet of the same name.

CC-3102 Medium

Published Wednesday 19 June 2019 (12:00) (updated 14 February 2020)

Plurox Backdoor

Plurox is a newly observed C-based modular backdoor. It appears to still be in active testing, with multiple variants seen in the wild.