Cyber alerts - NHS England Digital

Published Friday 9 November 2018 (12:00) (updated 17 February 2020)

Cisco SBS Privilege Escalation Vulnerability

Cisco have released details of a vulnerability in a number of their Small Business Switch (SBS) products.

Published Wednesday 14 November 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Flash Player, Adobe Acrobat and Reader, and Adobe Photoshop CC. An attacker could exploit these vulnerabilities to obtain access to sensitive information.

CC-2366 Low

Published Wednesday 9 May 2018 (12:00) (updated 17 February 2020)

GLitch Rowhammer DRAM Attack Variant

A new variant of the Rowhammer dynamic random-access-memory (DRAM) attack has been produced that targets WebGL-enabled graphics processing units (GPU).

CC-2360 Low

Published Wednesday 9 May 2018 (12:00) (updated 17 February 2020)

Lenovo System x Secure Boot Vulnerability

Lenovo internal testing discovered some System x server BIOS/UEFI versions that, when Secure Boot mode is enabled by a system administrator, do not properly authenticate signed code before booting it.

CC-2208 Medium

Published Thursday 5 April 2018 (12:00) (updated 17 February 2020)

SHARPKNOT Wiper

First observed in 2005, Shellbot is a remote access trojan primarily used as a backdoor and downloader for other malware.

CC-2130 Low

Published Wednesday 14 March 2018 (12:00) (updated 17 February 2020)

Exim Buffer Overflow Vulnerability

A vulnerability in the Exim mail transfer agent (MTA) may allow an unauthenticated remote attacker to execute arbitrary code. Over 400,000 Exim servers are estimated to be vulnerable.

CC-2619 Low

Published Monday 20 August 2018 (12:00) (updated 17 February 2020)

OpenSSH Username Enumeration Vulnerability

A user enumeration vulnerability in the OpenSSH connectivity tool has been disclosed by a group of security researchers. A remote attacker could exploit this vulnerability to determine valid usernames on a target system.

CC-2461 Low

Published Monday 4 June 2018 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released a security update for macOS High Sierra and supplemental updates for Sierra and El Capitan to address multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2479 Low

Published Tuesday 12 June 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Update

VMware has released a security update to address a vulnerability in AirWatch Agent for Android and Windows Mobile. A remote attacker could exploit this vulnerability to remotely execute code in the context of the affected system.

CC-1962 Low

Published Wednesday 24 January 2018 (12:00) (updated 17 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.