Cyber alerts - NHS England Digital

Published Thursday 8 November 2018 (12:00) (updated 17 February 2020)

Evernote Releases Security Update

Evernote has released a security update to address a cross-site scripting (XSS) vulnerability in their Evernote for Windows desktop client. A local attacker could exploit this vulnerability to execute JavaScript commands on an affected device.

CC-2763 Medium

Published Thursday 1 November 2018 (12:00) (updated 17 February 2020)

Cisco ASA and FTD DoS Vulnerability

A vulnerability has been discovered in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software that allows a remote attacker to cause a denial-of-service (DoS) in affected devices.

CC-2848 Low

Published Tuesday 18 December 2018 (12:00) (updated 17 February 2020)

Apache Releases Security Update for CouchDB

The Apache Software Foundation has released a security update to address a vulnerability in CouchDB. A remote attacker could exploit this vulnerability to gain control of an affected system.

CC-2855 Low

Published Thursday 20 December 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released security updates to address a vulnerability in Adaptive Security Appliance. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-2702 Medium

Published Thursday 4 October 2018 (12:00) (updated 17 February 2020)

iDRACula Dell EMC PowerEdge Vulnerability

A vulnerability in Dell EMC's Integrated Dell Remote Administration Controller (iDRAC) has been disclosed by security researchers. A remote attacker could exploit this vulnerability to deliver and execute malicious code undetected on an affected device.

CC-2714 Low

Published Monday 8 October 2018 (12:00) (updated 17 February 2020)

D-Link Releases Security Update

D-Link have released a security update to address multiple vulnerabilities in their Central WifiManager enterpise network administration suite.

CC-1947 Medium

Published Thursday 18 January 2018 (12:00) (updated 17 February 2020)

Zyklon HTTP Backdoor Malware

Zyklon is a publicly available HTTP backdoor malware with information-stealing, keylogging and distributed denial-of-service (DDoS) capabilities.

CC-2558 Medium

Published Thursday 2 August 2018 (12:00) (updated 17 February 2020)

QQ Internet Browser

QQ Browser is a Windows and Android internet browser produced by the Chinese technology company, Tencent. It is one of the most popular internet browsers worldwide, although only has a small percentage of UK users.

CC-2246 Low

Published Thursday 12 April 2018 (12:00) (updated 17 February 2020)

H34rtBl33d Ransomware

HeartBleed, also known as H34rtBl33d, is a newly observed ransomware tool. It is in no way related to the OpenSSL vulnerability of the same name.

CC-2191 Low

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

GhostMiner Cryptocurrency Miner

A new crypto-currency miner named GhostMiner has been observed exploiting a vulnerability in Oracle’s Weblogic Server. GhostMiner uses fileless execution to remain undetected by antivirus software.