Cyber alerts - NHS England Digital

Published Monday 6 August 2018 (12:00) (updated 17 February 2020)

HP Ink Printer Remote Code Execution Vulnerability

Hewlett Packard (HP) have released a security bulletin to address two vulnerabilities in certain HP Inkjet printers. A remote attacker could exploit these vulnerabilities to cause a static or stack buffer overflow, resulting in arbitrary code execution.

CC-2629 Medium

Published Thursday 23 August 2018 (12:00) (updated 17 February 2020)

GhostScript dSAFER Sandbox Bypass Vulnerabilities

Security researchers have discovered vulnerabilities that can bypass the optional dSAFER sandbox feature in GhostScript, which could give attackers an opportunity to achieve remote code execution on a target system.

CC-1955 Low

Published Tuesday 23 January 2018 (12:00) (updated 17 February 2020)

SkyGoFree Trojan

SkyGoFree is a trojan that targets the Android operating system and has the capability to allow a remote attacker to gain full control of infected devices.

CC-1977 Low

Published Monday 29 January 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vRealize Automation, vSphere Integrated Containers, and AirWatch Console. An attacker could exploit these vulnerabilities to take control of an affected system.

CC-2236 Low

Published Wednesday 11 April 2018 (12:00) (updated 17 February 2020)

Microsoft Releases April 2018 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2521 Low

Published Friday 29 June 2018 (12:00) (updated 17 February 2020)

Medtronic Releases Security Advisory for MyCareLink Patient Monitors

Medtronic has released a security advisory that addresses multiple vulnerabilities affecting their MyCareLink patient monitors.

CC-2507 Low

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

WaveThrough Browser Audio Vulnerability

A vulnerability has been discovered in the way that Edge and Firefox internet browsers handle audio content.

CC-2775 Low

Published Thursday 8 November 2018 (12:00) (updated 17 February 2020)

VirtualBox SBX Vulnerability

A security researcher has detailed a new zero-day vulnerability in the Oracle VirtualBox virtualisation software.

CC-2827 Medium

Published Wednesday 5 December 2018 (12:00) (updated 17 February 2020)

KingMiner Cryptocurrency Miner

KingMiner is a newly observed cryptocurrency miner that targets Microsoft Internet Information Services (IIS) and Microsoft SQL servers.

CC-2667 Medium

Published Thursday 13 September 2018 (12:00) (updated 17 February 2020)

COBINT Remote Access Trojan

COBINT is a remote access trojan (RAT) that is being used to perform reconnaissance on infected users’ network before allowing attackers to implant more malware on the affected network.