Cyber alerts - NHS England Digital

Published Tuesday 29 January 2019 (12:00) (updated 14 February 2020)

Microsoft Windows System Guard Launch Vulnerability

A denial-of-service vulnerability has been discovered in Windows 10 systems using UEFI Secure Boot and the System Guard Secure Launch functionality.

CC-2989 Low

Published Thursday 21 March 2019 (12:00) (updated 14 February 2020)

CUJO Releases Security Update for Smart Firewall Vulnerabilities

CUJO have released an update to address a vulnerability in its Smart Firewalls. The success exploitation of these vulnerabilities will allow malicious actors to remotely execute code without any form of authentication.

CC-2990 Low

Published Tuesday 26 March 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3106 Low

Published Wednesday 19 June 2019 (12:00) (updated 14 February 2020)

Linux and FreeBSD SACK DoS Vulnerabilities

Security researchers have disclosed four vulnerabilities in the TCP networking stacks of the Linux and FreeBSD operating system kernels.

CC-3083 Low

Published Wednesday 5 June 2019 (12:00) (updated 14 February 2020)

Windows RDP Network Level Authentication Vulnerability

A new zero-day vulnerability in the Network Level Authentication (NLA) feature used by Microsoft's Remote Desktop Protocol (RDP) client has been discovered.

CC-2945 Low

Published Thursday 21 February 2019 (12:00) (updated 14 February 2020)

WinRAR Releases Security Update

WinRAR has released a security update to address a path traversal vulnerability in their WinRAR file compression utility.

CC-2928 Low

Published Thursday 14 February 2019 (12:00) (updated 14 February 2020)

WordPress Simple Social Buttons Plugin Vulnerability

A security researcher has identified a vulnerability in the Simple Social Buttons plugin that is commonly used by WordPress site owners.

CC-2950 Low

Published Monday 25 February 2019 (12:00) (updated 14 February 2020)

B0r0nt0K Ransomware

B0r0nt0K is a newly observed ransomware tool targeting unsecured Linux and Windows web servers.

CC-3186 Medium

Published Monday 19 August 2019 (12:00) (updated 14 February 2020)

Mozilla Releases Security Updates for Firefox and Firefox ESR

Mozilla has released security updates to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system.

CC-3005 Medium

Published Thursday 4 April 2019 (12:00) (updated 14 February 2020)

PsiXBot Malware

PsiXBot is a modular malware written in .NET which has recently undergone significant development. This has led to an increase in large scale distributions of the malware via spam campaigns or as part of other malware campaigns.