Cyber alerts - NHS England Digital

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

Rising Sun Trojan

First observed in 2018, Rising Sun is an information stealing trojan created by the Lazarus advanced persistent threat group for use in their global Operation Sharpshooter campaign targeting critical infrastructure.

CC-2630 Medium

Published Thursday 23 August 2018 (12:00) (updated 17 February 2020)

Apache Releases Security Update for Apache Struts 2

The Apache Software Foundation has released a security update to address a vulnerability in Apache Struts 2. A remote attacker could exploit this vulnerability to execute arbitrary code on an affected system.

CC-2606 Low

Published Wednesday 15 August 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in vSphere, Workstation, Fusion, and Virtual Appliances. An attacker could exploit these vulnerabilities to obtain sensitive information.

CC-1943 Low

Published Wednesday 17 January 2018 (12:00) (updated 17 February 2020)

ISC Releases Security Advisories for DHCP and BIND

The Internet Systems Consortium (ISC) has released updates or workarounds that address vulnerabilities in versions of ISC Dynamic Host Configuration Protocol (DHCP) and Berkeley Internet Name Domain (BIND).

CC-1949 Low

Published Thursday 18 January 2018 (12:00) (updated 17 February 2020)

MaMi DNS Trojan

MaMi is a new piece of malware that targets macOS devices and allows an attacker to redirect users to malicious websites.

CC-2544 Low

Published Wednesday 18 July 2018 (12:00) (updated 17 February 2020)

Magecart Information Stealing Campaign

An advanced persistent threat group called Magecart has stolen personal data from users of hundreds of websites by compromising third-party components.

CC-2715 Low

Published Tuesday 9 October 2018 (12:00) (updated 17 February 2020)

Apple Releases Security Updates for iCloud and iOS

Apple has released security updates to address vulnerabilities in iCloud for Windows and iOS. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2706 Low

Published Friday 5 October 2018 (12:00) (updated 17 February 2020)

Intel ME Manufacturing Mode Vulnerability

Certain Intel CPUs appear to have been shipped to original equipment manufactures (OEM) with highly proprietary debugging tools still enabled.

CC-2815 Low

Published Thursday 29 November 2018 (12:00) (updated 17 February 2020)

Boaxxe Trojan

First observed in 2011, Boaxxe (also known as Miuref) is an information stealing trojan and backdoor. First seen in 2011, it continues to be used by threat actors, as seen by the 3ve large-scale advertisement fraud campaign.

CC-2469 Low

Published Wednesday 6 June 2018 (12:00) (updated 17 February 2020)

Philips Healthcare IntelliVue Patient and Avalon Fetal Monitors Vulnerabilities

Philips Healthcare have released updates for their IntelliVue and Avalon patient monitors to address multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to obtain sensitive information from an affected system.