Cyber alerts - NHS England Digital

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

Western Digital My Cloud Zero-Day Release

Multiple Western Digital My Cloud products have been found to contain vulnerabilities which could allow a full compromise of the device by a remote unauthenticated actor.

CC-1354 Medium

Published Tuesday 25 April 2017 (12:00) (updated 17 February 2020)

DoublePulsar Backdoor

The Shadow Brokers advanced persistent threat group are well known for auctioning off stolen dumps of exploits, implants and tools reportedly obtained from the NSA.

CC-1597 Medium

Published Tuesday 22 August 2017 (12:00) (updated 17 February 2020)

OSPF LSA Manipulation Vulnerability in Multiple Cisco Products

Multiple Cisco products are affected by a vulnerability involving the Open Shortest Path First (OSPF) Routing Protocol Link State Advertisement (LSA) database.

CC-1565 Medium

Published Wednesday 9 August 2017 (12:00) (updated 17 February 2020)

Microsoft Releases August 2017 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of a system.

CC-1520 Medium

Published Wednesday 12 July 2017 (12:00) (updated 17 February 2020)

Microsoft Releases July 2017 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of a system.

CC-1503 Medium

Published Tuesday 4 July 2017 (12:00) (updated 17 February 2020)

Information Stealing Worm - Retadup

A new information-stealing malware has been observed attacking Israeli hospitals. The malware is highly obfuscated, with the payload hidden under layers of encryption.

CC-1067 Low

Published Thursday 12 January 2017 (12:00) (updated 17 February 2020)

Kaspersky Releases Certificate Patch

Google's research team recently discovered vulnerability found within Kaspersky Antivirus has been publically released detailing a bug that disabled certificate validation.

CC-1451 High

Published Wednesday 7 June 2017 (12:00) (updated 17 February 2020)

ShadowBrokers Wine Of The Month Club Launched

ShadowBrokers "Wine Of The Month Club" Launched

CC-1863 Medium

Published Monday 18 December 2017 (12:00) (updated 17 February 2020)

KaiXin Exploit Kit

KaiXin is an exploit kit, first identified in 2012. KaiXin has been delivered via banner ads and JavaScript injection on compromised websites.

CC-1810 Medium

Published Friday 24 November 2017 (12:00) (updated 17 February 2020)

F5 Networks BIG-IP Vulnerability

F5 Networks BIG-IP virtual server appliances may be vulnerable to an Adaptive Chosen-Ciphertext attack (ACC, also known as a Bleichenbacher attack) when configured with a Client SSL profile.