Cyber alerts - NHS England Digital

Published Thursday 16 February 2017 (12:00) (updated 17 February 2020)

Ticketbleed Vulnerability in F5 Networks Appliances

A number of F5 Networks’ BIG-IP appliances contains a vulnerability that can leak sensitive data to a remote attacker. It has been called Ticketbleed due to its similarities to the well-known Heartbleed vulnerability.

CC-1089 Medium

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Eight Vulnerabilities Patched in WordPress

A recent WordPress update has seen eight vulnerabilities and 62 bugs addressed. The latest update has been classified as a security release.

CC-1482 Medium

Published Wednesday 21 June 2017 (12:00) (updated 17 February 2020)

Vault 7 - Tomato, Surfside and Claymore

A new document released by WikiLeaks identifies three tools that can be utilised alongside Cherry Blossom to access devices.

CC-1546 Medium

Published Friday 28 July 2017 (12:00) (updated 17 February 2020)

SMBloris - 0 Day SMB Vulnerability

There has been a new 0-Day vulnerability found during research into the EternalBlue exploit released by the Shadow Brokers Team. During this research, it was discovered that SMBv1 handles allocation of the non-paged pool memory in a way that could be exploited.

CC-1690 Medium

Published Monday 9 October 2017 (12:00) (updated 17 February 2020)

New Rowhammer Attack Bypassing Countermeasures

A new variation of the Rowhammer attack has been identified by the same researchers who discovered the original Rowhammer attack.

CC-1739 Medium

Published Tuesday 31 October 2017 (12:00) (updated 17 February 2020)

Windows Password Hash Vulnerability Patched

A vulnerability in Microsoft Windows allows an attacker to steal Windows NTLM (a security protocol suite that provides network authentication) password hashes without interaction has recently been patched by Microsoft.

CC-1339 Low

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for April 2017 to address 299 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

CC-1414 Medium

Published Wednesday 17 May 2017 (12:00) (updated 17 February 2020)

Microsoft Monthly Patches Address 0-Day Vulnerabilities

Microsoft have released their monthly patch rollout to address a total of 56 vulnerabilities.

CC-1411 High

Published Friday 12 May 2017 (12:00) (updated 17 February 2020)

WannaCry Ransomware Using SMB Vulnerability

The SMB vulnerabilities within security bulletin MS17-010 are critical vulnerabilities that have also been used to propagate other malware - see Adylkuzz Cryptocurrency Mining Malware (CC-1416).

CC-1259 Medium

Published Wednesday 15 March 2017 (12:00) (updated 17 February 2020)

Dot Ransomware as a Service RaaS

A new ransomware offered as a service has been identified in hacking forums.