Cyber alerts - NHS England Digital

Published Friday 18 May 2018 (12:00) (updated 17 February 2020)

7-Zip RCE Vunerability

A vulnerability has been discovered in the 7-Zip open-source file archive utility which could allow a remote user to execute arbitrary code.

CC-2424 Medium

Published Thursday 24 May 2018 (12:00) (updated 17 February 2020)

VPNFilter Network Malware

VPNFilter is an advanced modular malware framework that has been observed targeting small and home office ( SOHO ) networking and network attached storage (NAS) devices throughout Europe and the USA.

CC-2425 Medium

Published Thursday 24 May 2018 (12:00) (updated 17 February 2020)

CryptON Ransomware

CryptON is a ransomware tool that is deployed in attacks targeting computers with Remote Desktop Services (RDS) exposed to the Internet.

CC-2150 Medium

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

Qrypter MaaS Remote Access Trojan

A new Java-based remote access trojan (RAT), known as Qrypter, has been observed.

CC-2652 Medium

Published Wednesday 5 September 2018 (12:00) (updated 17 February 2020)

Malware Campaign Exploiting WMIC

A new campaign has been observed using the Windows Management Instrumentation Command-line (WMIC) tool to install a variety of different malware.

CC-2676 Low

Published Wednesday 19 September 2018 (12:00) (updated 17 February 2020)

Intel Releases Security Update for CSME

Intel have released an update to address a vulnerability in their Converged Security Manageability Engine (CSME, also known as ME). An unauthenticated local attacker could exploit this vulnerability to gain access to or alter security keys.

CC-2504 Low

Published Thursday 21 June 2018 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates for Multiple Products

Cisco has released several updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-2042 Low

Published Wednesday 14 February 2018 (12:00) (updated 17 February 2020)

Microsoft Releases February 2018 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1897 Low

Published Thursday 4 January 2018 (12:00) (updated 17 February 2020)

TelegramRAT

TelegramRAT is a Remote Access Trojan that is being distrabuted via malicious Microsoft Office documents. TelegramRAT exploits the Microsoft vulnerability registered as CVE-2017-11882 .

CC-2566 Low

Published Thursday 2 August 2018 (12:00) (updated 17 February 2020)

Drupal Releases Security Updates

Drupal has released security updates addressing a vulnerability in old versions of Drupal. A remote attacker could exploit this vulnerability to take control of an affected system.