Cyber alerts - NHS England Digital

Published Wednesday 8 August 2018 (12:00) (updated 17 February 2020)

Medtronic MyCareLink Patient Monitor Vulnerabilities

Medtronic has released a security update to address two vulnerabilities in their MyCareLink patient monitors. A remote attacker could exploit these vulnerabilities to obtain device data or cause a denial- of-service condition.

CC-2481 Low

Published Wednesday 13 June 2018 (12:00) (updated 17 February 2020)

Spam Campaign Using the IQY Extension

A new spam campaign has been observed using attachments containing Excel Web Query ( .iqy ) files.

CC-2436 Low

Published Tuesday 29 May 2018 (12:00) (updated 17 February 2020)

Joomla! Releases Security Update

Joomla! has released a security update to address a vulnerability in the Core content management system. A remote attacker could exploit this vulnerability to perform cross-site scripting (XSS) attacks on an affected system

CC-2543 Medium

Published Thursday 19 July 2018 (12:00) (updated 17 February 2020)

Upatre Downloader Trojan

Upatre is a downloader trojan used to deliver several other well-known malware families including Zeus , Locky and Dyre .

CC-2538 Low

Published Thursday 12 July 2018 (12:00) (updated 17 February 2020)

ISC Releases Security Advisory for Kea DHCP

The Internet Systems Consortium (ISC) has released a security advisory that addresses a memory leak vulnerability in Kea DHCP 1.4.0. A remote attacker could exploit this vulnerability to cause a denial-of-service condition.

CC-2160 Medium

Published Thursday 22 March 2018 (12:00) (updated 17 February 2020)

Samba Password Change Vulnerability

A vulnerability has been discovered in the Samba 4 Active Directory domain controller (AD DC) which allows authenticated users to change passwords for other accounts, including privileged and administrative accounts.

CC-2841 Low

Published Wednesday 12 December 2018 (12:00) (updated 17 February 2020)

Microsoft Releases December 2018 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker could exploit some of these vulnerabilities to obtain access to sensitive information.

CC-1934 Low

Published Friday 12 January 2018 (12:00) (updated 17 February 2020)

VMware Releases Security Updates for Workstation, Fusion

VMware has released security updates to address vulnerabilities in VMware Workstation and Fusion. An attacker could exploit these vulnerabilities to take control of an affected system.

CC-2058 Low

Published Wednesday 21 February 2018 (12:00) (updated 17 February 2020)

Olympic Destroyer Worm

Olympic Destroyer is a worm that was deployed in a cyberattack targeting the Pyeongchang Winter Olympics, causing disruption to the website and opening ceremony.

CC-2298 Medium

Published Wednesday 25 April 2018 (12:00) (updated 17 February 2020)

Internet Explorer Zero-day Vulnerability

A vulnerability in Internet Explorer (IE) and any applications that use the IE kernel are being exploited through malicious Microsoft Office documents which are distributed through spam email campaigns.