Cyber alerts - NHS England Digital

Published Monday 17 September 2018 (12:00) (updated 17 February 2020)

MS-ISAC Releases Advisory on PHP Vulnerabilities

The Multi-State Information Sharing & Analysis Centre (MS-ISAC) has released an advisory on multiple Hypertext Preprocessor (PHP) vulnerabilities. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2459 Low

Published Monday 4 June 2018 (12:00) (updated 17 February 2020)

Nocturnal Stealer Browser Spyware

A newly identified spyware tool called Nocturnal Stealer has been observed targeting popular browsers and cryptocurrency wallets.

CC-2514 Low

Published Wednesday 27 June 2018 (12:00) (updated 17 February 2020)

Red Alert Android Malware

Red Alert Is an Android-based malware which uses spam emails to spread infected Android Package Kit (APK) files to gain administration access to the device.

CC-2487 Low

Published Thursday 14 June 2018 (12:00) (updated 17 February 2020)

Intel Releases Security Advisory on Lazy FP State Restore Vulnerability

Intel has released recommendations to address a vulnerability - dubbed Lazy FP state restore - affecting Intel Core-based microprocessors. An attacker could exploit this vulnerability to obtain access to sensitive information.

CC-2854 Low

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

Microsoft Releases Security Updates

Microsoft has released out-of-band security updates to address a vulnerability in Internet Explorer 9, 10, and 11. An attacker could exploit this vulnerability to take control of an affected system.

CC-2595 Low

Published Monday 13 August 2018 (12:00) (updated 17 February 2020)

Oracle Releases Security Updates

Oracle has released updates to address vulnerabilities affecting Oracle Database Server. A remote authenticated attacker could exploit these vulnerabilities to take control of an affected system.

CC-2596 Medium

Published Monday 13 August 2018 (12:00) (updated 17 February 2020)

KEYMARBLE Remote Access Trojan

KEYMARBLE is a remote access trojan created and operated by the HIDDEN COBRA advanced persistent threat group.

CC-2449 Medium

Published Thursday 31 May 2018 (12:00) (updated 17 February 2020)

Dell EMC RecoverPoint Vulnerabilities

Six vulnerabilities have been discovered in Dell EMC's RecoverPoint disaster recovery system products. An attacker may exploit these to remotely execute code on a targeted device.

CC-2342 Low

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

Oracle WebLogic RCE Vulnerability

A vulnerability in Oracle's WebLogic web server could allow an unauthenticated attacker to execute arbitrary code within the affected application.

CC-2746 Medium

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

Chalubo DDoS Botnet

Chalubo (also referred to as ChaCha-Lua-Bot ) is a newly observed Lua-based trojan targeting Linux systems to enrol into a distributed denial-of-service (DDoS) botnet.