Cyber alerts - NHS England Digital

Published Wednesday 25 April 2018 (12:00) (updated 17 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2750 Medium

Published Monday 29 October 2018 (12:00) (updated 17 February 2020)

FilesLocker Ransomware

FilesLocker is a new ransomware-as-a-service (RaaS) that targets Chinese and English speaking users.

CC-2721 Low

Published Wednesday 10 October 2018 (12:00) (updated 17 February 2020)

Xiongmai XMeye IoT Cloud Server Vulnerabilities

Three vulnerabilities have been discovered in Hangxhou Xiongmai Technology Company's XMeye P2P Cloud, a server protocol used to control Internet-of-Things (IoT) devices, primarily IP cameras.

CC-2769 Low

Published Wednesday 7 November 2018 (12:00) (updated 17 February 2020)

Self-Encrypting Solid-State Drive Vulnerabilities

Microsoft have released details of several vulnerabilities in the hardware encryption of certain Samsung and Crucial-branded self-encrypting solid-state drives.

CC-1898 Medium

Published Thursday 4 January 2018 (12:00) (updated 17 February 2020)

Vawtrak Banking Trojan

Vawtrak is a banking trojan malware that when infected uses the Virtual Networking Computing (VNC) channels to remote access and it creates Socket Secure (SOCKS) proxy servers for the communications of the user’s computer.

CC-2389 Low

Published Friday 18 May 2018 (12:00) (updated 17 February 2020)

Kuik Malvertising Trojan

First observed in August 2018, Kraken Cryptor is a ransomware tool that is delivered to users disguised as a legitimate anti-virus application.

CC-2406 Low

Published Friday 18 May 2018 (12:00) (updated 17 February 2020)

StalinLocker Wiper Ransomware

StalinLocker is a newly observed wiper and ransomware tool. Also known as StalinScreamer; it is believed to be in active development with several versions, some non-working, being distributed.

CC-2410 Low

Published Friday 18 May 2018 (12:00) (updated 17 February 2020)

DrayTek Releases Security Updates

DrayTek have released updates to address vulnerabilities affecting multiple products. The vulnerabilities have been exploited by remote attackers to change settings including DNS server addresses.

CC-2560 Medium

Published Thursday 2 August 2018 (12:00) (updated 17 February 2020)

CactusTorch Fileless Malware

CactusTorch is fileless malware that executes malicious code on the infected devices.

CC-2475 Low

Published Friday 8 June 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address vulnerabilities in Flash Player. A remote attacker could exploit these vulnerabilities to take control of an affected system.