Cyber alerts - NHS England Digital

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

Cisco Adaptive Security Appliance SSL Bypass Vulnerability

A vulnerability exists in the Secure Sockets Layer (SSL) virtual private network (VPN) Client Certificate Authentication feature for Cisco's Adaptive Security Appliance (ASA).

CC-2297 Low

Published Thursday 3 May 2018 (12:00) (updated 17 February 2020)

Ransomnix Ransomware

Ransomnix is a ransomware tool that uses vulnerable WordPress plug-ins to target web servers and websites.

CC-2520 Medium

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

Cisco Security Appliances DoS Exploit

Threat actors are exploiting a known vulnerability in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software to cause denials-of-service (DoS) on affected devices.

CC-2579 Medium

Published Tuesday 7 August 2018 (12:00) (updated 17 February 2020)

njRAT Remote Access Trojan

First observed in 2013, njRAT (also known as Bladabindi) is a .NET-based remote access trojan that has undergone multiple revisions to improve its capability.

CC-2589 Medium

Published Thursday 9 August 2018 (12:00) (updated 17 February 2020)

Pr1ncess Locker Ransomware-as-a-Service

Pr1ncess Locker, also referred to as Princess, is a ransomware tool sold as-a-service (MaaS) to affiliates through a number of dark net forums.

CC-2073 Medium

Published Thursday 22 February 2018 (12:00) (updated 17 February 2020)

JenkinsMiner Cryptocurrency Botnet

JenkinsMiner is a newly observed cryptocurrency mining botnet that targets servers running Jenkins, a popular Java-based automation platform.

CC-2756 Low

Published Wednesday 31 October 2018 (12:00) (updated 17 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2711 Low

Published Monday 8 October 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Update

VMware has released a security update to address a vulnerability in AirWatch Console. An attacker could exploit this vulnerability to take control of an affected system

CC-2093 Medium

Published Thursday 1 March 2018 (12:00) (updated 17 February 2020)

Philips IntelliSpace Portal Vulnerabilities

Thirty five vulnerabilities have been discovered in Philips IntelliSpace Portal, a suite of clinical applications. Some of these vulnerabilities can be exploited by unauthenticated attackers.

CC-2771 Low

Published Wednesday 7 November 2018 (12:00) (updated 17 February 2020)

BianLian Android Dropper

BianLian is a newly identified modular Android dropper that has been used in several recent banking trojan campaigns.