Cyber alerts - NHS England Digital

Published Tuesday 3 July 2018 (12:00) (updated 11 January 2022)

RAMpage: ARM-based DRAM Attack

A new attack targeting modern Android-based devices has been detailed in a research paper. Known as RAMpage, the authors of the paper claim it can be used to gain unauthorised access to a targeted device.

CC-2519 Low

Published Thursday 28 June 2018 (12:00) (updated 17 February 2020)

Windows 10 Settings Shortcut Vulnerability

A vulnerability has been uncovered in Microsoft Windows 10 that allows users to create shortcuts that can execute malicious code on the affected machine whilst bypassing security features.

CC-2501 Medium

Published Wednesday 20 June 2018 (12:00) (updated 17 February 2020)

ZeroFont Email Filter Bypass Technique

A new technique - known as ZeroFont - for bypassing Window's automatic email filtering has been detailed.

CC-2481 Low

Published Wednesday 13 June 2018 (12:00) (updated 17 February 2020)

Spam Campaign Using the IQY Extension

A new spam campaign has been observed using attachments containing Excel Web Query ( .iqy ) files.

CC-2422 Medium

Published Thursday 24 May 2018 (12:00) (updated 11 January 2022)

GDPR-related Phishing Advisory

Several General Data Protection Regulation (GDPR) related phishing and spam campaigns have been observed attempting to exploit the mass communications organisations are sending to their users to ensure compliance with the new regulation.

CC-2384 Medium

Published Tuesday 15 May 2018 (12:00) (updated 17 February 2020)

Remote Rowhammer DRAM Attacks

Several variants of the Rowhammer dynamic random access memory (DRAM) attack have been identified by a two independent groups of researchers.

CC-2371 Low

Published Thursday 10 May 2018 (12:00) (updated 17 February 2020)

Office 365 Email baseStriker Vulnerability

A vulnerability named baseStriker has been discovered in Office 365 which allows threat actors to deliver malicious emails.

CC-2331 Medium

Published Wednesday 2 May 2018 (12:00) (updated 17 February 2020)

Energetic Bear APT Server Attacks

The Russia-based advanced persistent threat group Energetic Bear (also known as Crouching Yeti, Berserk Bear, Dragonfly or Havex) are involved in an ongoing campaign throughout Europe, Turkey and the USA.

CC-2333 Medium

Published Wednesday 2 May 2018 (12:00) (updated 17 February 2020)

Operation GhostSecret Data Theft Campaign

The HIDDEN COBRA advanced persistent threat group are believed to be conducting an ongoing campaign known as Operation GhostSecret.

CC-2321 Medium

Published Wednesday 2 May 2018 (12:00) (updated 11 January 2022)

Rubella Macro Builder Malware Kit

A new malware builder and loader has been observed distributing the Panda and Gootkit financial trojans.