Skip to content
October 5, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • National Health Service (NHS) system encounters mysterious failure, local health care facilities plunged into chaos
  • Cyber Security

National Health Service (NHS) system encounters mysterious failure, local health care facilities plunged into chaos

Do Son January 26, 2018 2 minutes read
National Health Service
Add Daily CyberSecurity as a preferred source on Google

According to IBTimes, on January 25 news, England and Wales NHS (National Medical Service System) hospitals announced a major event on the 24th – two separate data center suffered a mysterious IT failure, resulting in doctors and NHS staff Patient records were inaccessible for some time and e-mail and intranet services were also affected due to outages. Currently, NHS has partnered with Microsoft to protect its IT infrastructure against cyber attacks.

NHS’s IT systems are located in Wales and cover important information such as booking systems, prescriptions and medical notes. It is reported that the two data centers are located in the United Kingdom Blaenavon and Cardiff Bay.

Because of this incident, NHS system management of this important information cannot be timely delivery, so seriously affect the daily operation of NHS hospital. In addition, according to the Manchester Evening News, Royal Manchester and Royal Manchester Children’s Hospital have also been affected.

NCSC, the UK national cybersecurity center, said the incident was not caused by a cyberattack, while NYS IT at Powys (Wales) said the incident could be related to a national firewall.

“Please only attend A&E for serious or life-threatening emergencies,” tweeted Manchester University NHS Foundation Trust. A spokesperson added: “We are working to resolve this as quickly as possible and services are using their well-rehearsed business continuity plans.”

There is currently a technical issue affecting two Data Centres. This is under investigation by the NHS Wales Informatics Service and is being dealt with as a priority.

— Digital Health and Care Wales (@DHCWales) January 24, 2018

Although the British authorities expressed their own views, the specific circumstances need further investigation. The British National Health Service Wales Informatics Services (NWIS) said it has prioritized the attack.

Late on the 24th, NHS hospital data center has been re-launched, and all clinical systems are back to use. To prevent cyber attacks more effectively, NHS announced a partnership with Microsoft to protect its IT infrastructure.

Source: IBTimes

Related coverage

  • EU Sanctions Russian GRU Officers for 2020 Cyberattacks on Estonia
  • 2FA Bypass and More: Inside ONNX Store, the Phishing Threat to Your Finances
  • Wave of Attacks on WordPress: Urgent Update for WP Statistics, WP Meta SEO, LiteSpeed Cache
  • OfflRouter Virus: A Persistent Threat in Ukraine Exploiting Confidential Documents
  • Steganography & Sabotage: Inside Pawn Storm’s PRISMEX Offensive Against NATO Logistics
  • Google’s Agentic AI Security Team Develops Framework to Combat Prompt Injection Attacks
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: National Health Service

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105285CVSS 10.0
    A security vulnerability has been detected in Totolink A3002MU 1.0.0-B20230403.1455. This affects an unknown function of the file...
    📅 Updated: Oct 5, 2026
  • CVE-2026-105284CVSS 10.0
    A weakness has been identified in Totolink A3002MU 1.0.0-B20230403.1455. The impacted element is the function sub_40FCFC of the...
    📅 Updated: Oct 5, 2026
  • CVE-2026-103510CVSS 9.5
    P4 Search prior to 2026.4.2 does not fail securely when its service authentication token is blank. In affected...
    📅 Updated: Oct 5, 2026
  • CVE-2026-100102CVSS 9.5
    Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to...
    📅 Updated: Oct 5, 2026
  • CVE-2026-100103CVSS 10.0
    Perforce P4 Search container images prior to 2026.4.2 reset the service authentication token to a publicly documented default...
    📅 Updated: Oct 5, 2026
  • CVE-2026-8763CVSS 9.3
    In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This...
    📅 Updated: Oct 5, 2026
  • CVE-2026-105223CVSS 9.1
    maclof kubernetes-client 0.17.0 before 0.32.0 disables TLS certificate verification in parseKubeconfig() and parseKubeconfigFile() when a kubeconfig lacks certificate-authority-data,...
    📅 Updated: Oct 5, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 5, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.