Cyber alerts - NHS England Digital

Published Friday 5 October 2018 (12:00) (updated 17 February 2020)

Carestream Vue RIS Vulnerability

Carestream Health have released a security update to addresss a vulnerability in their Vue radiological information system (RIS) product.

CC-2772 Low

Published Thursday 8 November 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities affecting Cisco products. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2806 Medium

Published Thursday 22 November 2018 (12:00) (updated 17 February 2020)

Outlaw IRC Botnet

Two new variants of the Outlaw hacking group's botnet have been observed. The Outlaw botnet targets organisations worldwide and is based on the Shellbot remote access trojan.

CC-2794 Low

Published Monday 19 November 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in multiple products. An attacker could exploit these vulnerabilities to remotely execute code or cause a denial-of-service.

CC-2275 Medium

Published Thursday 19 April 2018 (12:00) (updated 17 February 2020)

Drupal Releases Security Updates

Drupal has released updates addressing a vulnerability in Drupal 8 and 7. A remote attacker could exploit this vulnerability to gain access to sensitive information.

CC-2695 Low

Published Friday 28 September 2018 (12:00) (updated 17 February 2020)

DNSSEC Key Signing Key Rollover

On October 11, 2018, the Internet Corporation for Assigned Names and Numbers (ICANN) will be changing the Root Zone Key Signing Key (KSK) used in the Domain Name System Security Extensions (DNSSEC) protocol.

CC-2413 Low

Published Tuesday 22 May 2018 (12:00) (updated 17 February 2020)

ISC Releases Security Advisories for BIND

The Internet Systems Consortium (ISC) has released updates that address vulnerabilities in versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

CC-2397 Low

Published Wednesday 16 May 2018 (12:00) (updated 17 February 2020)

Electron Webview XSS Vulnerability

A vulnerability , CVE-2018-1000136 , has been discovered which allows Node.js JavaScript runtime integration to be re-enabled in some Electron applications that previously disabled it.

CC-2601 Medium

Published Tuesday 14 August 2018 (12:00) (updated 17 February 2020)

Shrug2 Ransomware

Shrug2 is a newly observed ransomware tool written using the .NET framework.

CC-2027 Low

Published Thursday 8 February 2018 (12:00) (updated 17 February 2020)

WordPress Plugin Vulnerability

A popular WordPress plugin has been found to be vulnerable to cross site scripting (XSS) and PHP injection attacks.