Cyber alerts - NHS England Digital

Published Friday 18 August 2017 (12:00) (updated 17 February 2020)

Chrome Turbofan Remote Code Execution

Older versions of Google Chrome can be affected by a type confusion vulnerability which is designed to confuse JavaScript code and allow an attacker to execute remote code in the browser.

CC-1334 Medium

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

Cisco Unified Communications Manager SQL Injection Vulnerability

Security researchers have found that Cisco Unified Communications Manager (Cisco Unified CM / CallManager) is vulnerable to an SQL-injection.

CC-1842 Low

Published Friday 8 December 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit these vulnerabilities to take control of an affected system.

CC-1881 Low

Published Wednesday 27 December 2017 (12:00) (updated 17 February 2020)

Ineffective configuration on Lexmark printers

Over 1000 mis-configured Lexmark printers have been discovered operating open to the public internet.

CC-1808 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Office OLE Vulnerability Allows Remote Code Execution

A memory corruption fault in the EQNEDT32.exe Object Linking and Embedding (OLE) used by Microsoft Office products for insertion of equations may result in an unauthenticated, remote user being able to execute arbitrary code.

CC-1196 Medium

Published Thursday 23 February 2017 (12:00) (updated 17 February 2020)

AnC Attacks Render ASLR Useless

A new attack called ASLR and Cache (AnC) targeting the security mechanism Address Space Layout Randomisation (ASLR).

CC-1421 Low

Published Thursday 18 May 2017 (12:00) (updated 17 February 2020)

GootKit Targets Banks With Redirection Attacks

GootKit is a banking trojan and it has recently been tested against high profile targets in the UK financial sector. It now uses redirection attacks to collect credentials and phishing in order to direct users towards malicious websites.

CC-1498 Medium

Published Thursday 29 June 2017 (12:00) (updated 17 February 2020)

TeamSpy Malware

The TeamSpy malware made the headlines in 2013 when security researchers discovered a decade long cyber espionage campaign that targeted high-level political figures and industrial entities in Eastern Europe.

CC-1064 Low

Published Thursday 12 January 2017 (12:00) (updated 17 February 2020)

MongoDB Servers Targeted in Ransom Attacks

MongoDB is an open source database application with a default configuration that does not have any security features enabled. Ransom attacks are targeting MongoDB installations that are reachable from the internet.

CC-1535 Medium

Published Tuesday 25 July 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in multiple products. A remote attacker may exploit some of these vulnerabilities to take control of an affected system.