Cyber alerts - NHS England Digital

Published Thursday 17 May 2018 (12:00) (updated 17 February 2020)

Maikspy Spyware

Maikspy is a newly observed spyware that targets users on social media and adult gaming sites. There are two known variants of this malware , targeting Google Android and Microsoft Windows devices respectively.

CC-2384 Medium

Published Tuesday 15 May 2018 (12:00) (updated 17 February 2020)

Remote Rowhammer DRAM Attacks

Several variants of the Rowhammer dynamic random access memory (DRAM) attack have been identified by a two independent groups of researchers.

CC-2116 Medium

Published Thursday 8 March 2018 (12:00) (updated 17 February 2020)

Memcached Exploit Amplifies DRDoS Attacks

An increase in amplified distributed reflected denial-of service (DRDoS) attacks has been observed using UDP port 11211.

CC-2153 Medium

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

MikroTik RouterOS SMB Vulnerability

A vulnerability in MikroTik's RouterOS software Server Message Block (SMB) service may allow a remote, unauthenticated attacker to execute arbitrary code.

CC-2183 Low

Published Wednesday 28 March 2018 (12:00) (updated 17 February 2020)

Word Press Download Manager Plugin Patch

Word Press Download Manager plugin is vulnerable to a remote code execution (RCE) and remote file inclusion (RFI) vulnerability.

CC-2614 Low

Published Friday 17 August 2018 (12:00) (updated 17 February 2020)

Philips PageWrite CardioGraph Vulnerabilities

Philips Healthcare have released updates to address vulnerabilities in their PageWrite cardiographs. An attacker could exploit these vulnerabilities to modify the settings of an affected device.

CC-2623 Low

Published Wednesday 22 August 2018 (12:00) (updated 17 February 2020)

PHP Phar Remote Code Execution Vulnerability

A security researcher has found a new technique that exploits the PHP unserialize method using phar archives to achieve remote code execution.

CC-2620 Medium

Published Monday 20 August 2018 (12:00) (updated 17 February 2020)

Apache Releases Security Updates for Tomcat Native

The Apache Foundation has released security updates to address vulnerabilities in Apache Tomcat Native. A remote attacker could exploit these vulnerabilities to take control of a vulnerable server.

CC-2646 Medium

Published Thursday 30 August 2018 (12:00) (updated 17 February 2020)

Microsoft Windows Privilege Escalation Vulnerability

A vulnerability has been discovered in the Microsoft Windows task scheduler that allows an authenticated attacker to obtain escalated privileges.

CC-2319 Low

Published Monday 30 April 2018 (12:00) (updated 17 February 2020)

Embedded C# Ransomware

A new ransomware tool has been discovered that uses embedded C# code that compiles at runtime instead of a distributed executable.