Cyber alerts - NHS England Digital

Published Monday 19 November 2018 (12:00) (updated 17 February 2020)

Skype for Business Emoji DoS Vulnerability

A vulnerability has been identified in the Skype for Business instant messaging client. An attacker can exploit this vulnerability to cause a denial-of-service attack, known as "Kitten of Doom".

CC-2681 Low

Published Thursday 20 September 2018 (12:00) (updated 17 February 2020)

Western Digital My Cloud Authentication Bypass Vulnerability

Security researchers have discovered a vulnerability in Western Digital My Cloud network-attached storage devices that allows an attacker with local network access to gain administrator privileges without providing a password.

CC-2658 Medium

Published Monday 10 September 2018 (12:00) (updated 17 February 2020)

CHAINSHOT Shellcode Downloader

A new malware campaign has been observed distributing CHAINSHOT, a downloader trojan , to organisations throughout Europe and the Middle East.

CC-2625 Medium

Published Wednesday 26 September 2018 (12:00) (updated 17 February 2020)

WordPress Tech Support Redirection Campaigns

New campaigns have been observed targeting outdated WordPress installations and related plugins to enrol affected users in technical support scams or redirect them to malicious sites.

CC-2684 Low

Published Monday 24 September 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in Cisco Video Surveillance Manager (VSM). A remote attacker could exploit this vulnerability to take control of an affected system.

CC-1928 Medium

Published Thursday 11 January 2018 (12:00) (updated 17 February 2020)

HydraCrypt Ransomware

HydraCrypt is a ransomware commonly distributed by the Angler Exploit Kit. It was first detected in early 2016 and part of the CrypBoss Ransomware family. In February 2016, Emisoft released a decrypter for the HydraCrypt and UmbreCrypt ransomware.

CC-1919 Low

Published Wednesday 10 January 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates for Flash Player

Adobe has released security updates to address a vulnerability in Flash Player. A remote attacker could exploit this vulnerability to obtain sensitive information.

CC-2836 Low

Published Tuesday 11 December 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Flash Player installer. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2517 Medium

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

JolokiaPwn: Java Web Server Vulnerability

A vulnerability in the Jolokia Java management extension (JMX) allows server information to be passed to an unauthorised user. A remote attacker could exploit this to gain access to sensitive data or cause a denial-of-service on a targeted device.

CC-2518 Medium

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

SSH RDP Cryptomining Campaign

Security researchers have detected an automated campaign to install cryptocurrency mining malware on Internet-facing servers and other devices.