Cyber alerts - NHS England Digital

Published Thursday 14 June 2018 (12:00) (updated 17 February 2020)

macOS 3rd Party Certificate Vulnerability

An vulnerability in the way certain third-party macOS developers interpret a popular code signing API could allow any applications to appears as certified.

CC-2474 Low

Published Thursday 7 June 2018 (12:00) (updated 17 February 2020)

Karius Banking Trojan

A new banking trojan named Karius has been identified. It appears to use code from more well-known banking trojans such as Ramnit and Trickbot .

CC-2346 Low

Published Wednesday 16 May 2018 (12:00) (updated 17 February 2020)

Browser Non-HTTPS Website Warning

Google have announced that all HTTP sites will be marked as insecure in version 68 of their Chrome browser, in an effort to encourage site owners to transition to HTTPS.

CC-2388 Low

Published Tuesday 15 May 2018 (12:00) (updated 17 February 2020)

Nigelthorn Chrome Extension Malware

Nigelthorn is malware that has targeted the Chrome browser since March 2018 and is capable of stealing account credentials, mining cryptocurrency and generating fraudulent clicks.

CC-2239 Medium

Published Thursday 12 April 2018 (12:00) (updated 17 February 2020)

Natus NeuroWork Multiple Vulnerabilities

Five vulnerabilities have been detected in Natus' NeuroWorks software, used by Natus Xltek electroencephalography (EEG) products.

CC-2313 Medium

Published Thursday 26 April 2018 (12:00) (updated 17 February 2020)

Drupalgeddon 3 - Drupal Remote Code Execution Vulnerability

On 25 April 2018 Drupal, the web content management system provider, released a security patch . Within hours of releasing this patch, Drupal detected successful exploitation attempts.

CC-2792 Medium

Published Thursday 15 November 2018 (12:00) (updated 17 February 2020)

Windows UAC Bypass Vulnerability

A bypass vulnerability has been identified in the User Account Control (UAC) feature on Windows 10 devices. The UAC prompt appears when users attempt to execute processes that require privilege escalation.

CC-1918 Low

Published Wednesday 10 January 2018 (12:00) (updated 17 February 2020)

Microsoft Releases January 2018 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1965 Medium

Published Thursday 25 January 2018 (12:00) (updated 17 February 2020)

Struts and DNN Cryptocurrency Server Exploits

Cryptocurrency mining software is being remotely installed on Windows and Linux web servers via exploits targeting known vulnerabilities in Apache Struts and DNN.

CC-2837 Low

Published Tuesday 11 December 2018 (12:00) (updated 17 February 2020)

DarthMiner Mining Malware

DarthMiner is a newly observed cryptocurrency mining malware created using the open-source EmPyre post-exploitation tool and the XMRig mining application.