Cyber alerts - NHS England Digital

Published Thursday 27 December 2018 (12:00) (updated 17 February 2020)

Underminer Exploit Kit

First observed in July 2017, the Underminer exploit kit has received various sophisticated updates in recent weeks.

Published Tuesday 19 June 2018 (12:00) (updated 17 February 2020)

Schneider Electric Releases Security Update for U.motion Builder

Schneider Electric has released updated firmware for U.motion Builder to address multiple vulnerabilities. A remote attacker could exploit these vulnerabilities to execute code on the affected system.

CC-2812 Medium

Published Thursday 29 November 2018 (12:00) (updated 17 February 2020)

PNG Dropper Downloader

First observed in August 2017, PNG Dropper (sometimes stylised as png_dropper) is a downloader trojan developed and used by the Turla advanced persistent threat group.

CC-2767 Low

Published Wednesday 7 November 2018 (12:00) (updated 17 February 2020)

Apache Releases Security Advisory for Apache Struts

The Apache Software Foundation has released an advisory to address a vulnerable commons-fileupload library used in Apache Struts. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-2744 Medium

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

jQuery File Upload Vulnerability

A vulnerability has been disclosed in the File Upload widget, a popular jQuery framework plugin. The researchers who discovered the vulnerability claim it could be exploited by a remote attacker to upload arbitrary files to an affected web server.

CC-2378 Low

Published Tuesday 15 May 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in their Prime File Upload servlet and WebEx Recording Format (WRF) media player. A remote attacker could exploit these vulnerabilities to gain access to sensitive data or execute arbitrary code on an affected device.

CC-2408 Low

Published Friday 18 May 2018 (12:00) (updated 17 February 2020)

PRB-Backdoor PowerShell Trojan

PRB-Backdoor is a trojan that exploits PowerShell to create a backdoor and steal information from infected devices.

CC-1930 Medium

Published Thursday 11 January 2018 (12:00) (updated 17 February 2020)

Dell EMC Zero-Day Vulnerabilities

Three vulnerabilities have been discovered in the Avamar Installation Manager (AVI) common to a number of Dell EMC virtual apppliances. Exploitation of these vulnerabilities may allow an unauthorised local attacker gain root access to a system.

CC-1948 Medium

Published Thursday 18 January 2018 (12:00) (updated 17 February 2020)

Cisco Unified Communications Manager XSS Vulnerability

A cross-site scripting (XSS) vulnerability has been found in the web-based management interface of Cisco Unified Communications Manager.

CC-2198 Low

Published Tuesday 3 April 2018 (12:00) (updated 17 February 2020)

Apple Releases Multiple Security Updates

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system.