Cyber alerts - NHS England Digital

Published Friday 23 November 2018 (12:00) (updated 17 February 2020)

Ghostscript Releases Security Update

Ghostscript has released a security update to address multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to cause a denial-of-service condition of an affected system.

CC-2808 Low

Published Friday 23 November 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates

VMware has released security updates to address a vulnerability in Workstation and Fusion. An attacker could exploit this vulnerability to take control of an affected system.

CC-2782 Low

Published Monday 12 November 2018 (12:00) (updated 17 February 2020)

WP GDPR Compliance Privilege Escalation Vulnerability

Van Ons has released a security update to address two vulnerabilities in their WP GDPR Compliance WordPress plugin. An attacker could exploit these vulnerabilities to escalates their privileges on the affected WordPress server.

CC-2350 Medium

Published Wednesday 9 May 2018 (12:00) (updated 17 February 2020)

MassMiner Cryptocurrency Worm

MassMiner cryptocurrency mining worm that targets vulnerable web servers.

CC-2846 Low

Published Monday 17 December 2018 (12:00) (updated 17 February 2020)

Jenkins Releases Security Patch

Jenkins has released a security update to address vulnerabilities in Jenkins. An attacker could exploit some of these vulnerabilities to execute arbitrary code execution.

CC-2735 Low

Published Thursday 18 October 2018 (12:00) (updated 17 February 2020)

Linksys E-Series Command Injection Vulnerabilities

Multiple vulnerabilities have been discovered in Linksys E-Series routers which allow an authenticated attacker to execute arbitrary code on an affected device.

CC-2747 Low

Published Thursday 25 October 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in Cisco Webex Productivity Tools and the Cisco Webex Meetings Desktop App. An attacker could exploit this vulnerability to take control of an affected system.

CC-2709 Low

Published Friday 5 October 2018 (12:00) (updated 17 February 2020)

Change Healthcare PeerVue Web Server Vulnerability

Change Healthcare have released a security update to address a vulnerability in their PeerVue Web Server product. A local attacker could exploit this vulnerability.

CC-2600 Low

Published Tuesday 14 August 2018 (12:00) (updated 17 February 2020)

PooleZoor Ransomware

PooleZoor is ransomware that targets Microsoft Windows. It is based on the open-source Hidden Tear ransomware that was first released in August 2015.

CC-2143 Low

Published Thursday 15 March 2018 (12:00) (updated 17 February 2020)

Advice on Browser Toolbars

A browser toolbar is a third-party add-on to a web browser that displays an additional row of controls such as buttons, textboxes and menus within a browsing window. They are potentially unwanted applications .