Cyber alerts - NHS England Digital

Published Monday 18 June 2018 (12:00) (updated 17 February 2020)

MysteryBot Android Banking Trojan

MysteryBot is a newly observed trojan targeting Android banking applications.

Published Thursday 14 June 2018 (12:00) (updated 17 February 2020)

Supermicro Server Authentication Vulnerabilities

Vulnerabilities in Supermicro server products have been discovered in both older and newer models which can affect the systems firmware.

CC-2477 Low

Published Friday 8 June 2018 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit these vulnerabilities to take control of an affected system.

CC-2466 Low

Published Thursday 7 June 2018 (12:00) (updated 17 February 2020)

Sigrun Ransomware

Sigrun is ransomware that purposely avoids Russian users and devices whilst asking for a ransom payment from all others that are infected.

CC-2604 Low

Published Wednesday 15 August 2018 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address several vulnerabilities in Samba. An attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-2166 Low

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

APT 28 DealersChoice Flash Exploit

DealersChoice is an exploit used by the Russian advanced persistent threat group APT28 (also known as FancyBear and Sofacy) that takes advantage of a vulnerability in older versions of Adobe Flash.

CC-2698 Low

Published Tuesday 2 October 2018 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address multiple vulnerabilities in Adobe Acrobat and Reader. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1942 Low

Published Wednesday 17 January 2018 (12:00) (updated 17 February 2020)

Oracle Releases January 2018 Security Bulletin

Oracle has released its Critical Patch Update for January 2018 to address 237 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to obtain access to sensitive information.

CC-2028 Low

Published Thursday 8 February 2018 (12:00) (updated 17 February 2020)

DDG Mining Botnet

DDG is a cryptocurrency mining botnet targeting two types of database server. Despite having a smaller number of enrolled devices compared to other botnets it has already mined over 5500 Monero tokens.

CC-2657 Low

Published Friday 7 September 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates

VMware has released security updates to address vulnerabilities in VMware AirWatch Agent and Content Locker. An attacker could exploit these vulnerabilities to obtain access to sensitive information.