Cyber alerts - NHS England Digital

CC-2095 Low

Published Thursday 1 March 2018 (12:00) (updated 17 February 2020)

OMG IoT Botnet

OMG is a variant of the Mirai botnet that targets Internet-of-Things (IoT) devices. This new variant uses exploits that target more devices and turns the infected devices into proxy servers.

CC-2193 Low

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

RDP Vulnerability in Windows Remote Access Tool

Microsoft’s Windows Remote Access Tool which allows remote assistance on a user's device if they are experiencing issues has a vulnerability that will allow a remote attacker to extract any file from the compromised user’s device without their knowledge.

CC-2159 Low

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

Zenis Ransomware

Zenis is a newly observed ransomware tool that uses AES encryption .

CC-2243 Low

Published Thursday 12 April 2018 (12:00) (updated 17 February 2020)

Android Releases April Security Update

Google has released updates to address multiple vulnerabilities in their Android mobile operating system. A remote attacker could exploit some of these vulnerabilities to execute arbitrary code on a targeted device.

CC-2199 Low

Published Tuesday 3 April 2018 (12:00) (updated 17 February 2020)

Microsoft Release Patch for Windows 7 and Windows Server 2008 R2 Systems

Microsoft has released security updates to address a vulnerability in Windows 7 x64 and Windows Server 2008 R2 x64 systems. Exploitation of this vulnerability may allow an attacker to take control of an affected system.

CC-2444 Low

Published Thursday 31 May 2018 (12:00) (updated 17 February 2020)

MalHide Malware

A new malware variant has been observed called Malhide. Using a method of business email compromise its primary focus is to create an email relay for fraud whilst hiding itself several times to remain anonymous.

CC-2512 Low

Published Wednesday 27 June 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address multiple vulnerabilities in Firefox ESR and Firefox. A remote attacker could exploit some of these vulnerabilities to cause a denial-of-service condition.

CC-1923 Medium

Published Wednesday 10 January 2018 (12:00) (updated 17 February 2020)

Western Digital My Cloud Multiple Vulnerabilities

Three vulnerabilities in Western Digital's popular "My Cloud" network-attached storage (NAS) devices for home or small office use have been discovered. These may allow an unauthenticated remote attacker read and write access to a device.

CC-2824 Low

Published Tuesday 4 December 2018 (12:00) (updated 17 February 2020)

Kubernetes Releases Security Updates

Kubernetes has released a security update to address a vulnerability in their open-source container manager. An authenticated user could exploit this vulnerability to escalate their privileges on an affected system

CC-2635 Medium

Published Wednesday 29 August 2018 (12:00) (updated 17 February 2020)

Turla Mail Client Backdoor

Security researchers have discovered a backdoor tool created by the Turla advanced persistent threat group to target mail clients.