Cyber alerts - NHS England Digital

Published Thursday 23 February 2017 (12:00) (updated 17 February 2020)

Adobe Monthly Update Dominated by Flash Player

Adobe Monthly update focuses to address primarily Flash Player vulnerabilities.

Published Thursday 16 February 2017 (12:00) (updated 17 February 2020)

BIND DNS V9 DNS64 and RPZ DoS Vulnerability

Version 9 of the BIND DNS platform which uses both DNS64 and RPZ are susceptible to denial of service (DoS) attacks. When the vulnerability is exploited, a remote attacker may cause the ‘named’ process to terminate.

CC-1677 Medium

Published Thursday 5 October 2017 (12:00) (updated 17 February 2020)

CMSTAR Downloader Malware

Two new variants of the CMSTAR downloader malware have been discovered containing two new previously unseen backdoors named, BYEBY and PYLOT. These have recently been used in a phishing campaigns.

CC-1121 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Android banking malware source code published

The source code of a new Android banking malware has been published along with instructions on how to use it.

CC-1122 Low

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Microsoft Advise Business Customers to Migrate From Windows 7

Microsoft has announced that extended support for Windows 7 is coming to an end. There are two deadlines depending on the version of the operating system.

CC-1455 Medium

Published Thursday 8 June 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address several vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of a system.

CC-1560 Medium

Published Friday 4 August 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome OS

Google has released Chrome OS version 60.0.3112.80 for Chrome devices to address multiple vulnerabilities. Exploitation of one these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1502 Medium

Published Monday 3 July 2017 (12:00) (updated 17 February 2020)

Further Flaws Found in Microsofts Malware Protection Engine

Another critical vulnerability has been identified in Microsoft's Malware Protection Engine, a key component within Windows Defender and other Microsoft anti-malware products.

CC-1319 Medium

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

RedLeaves RAT Remote Administration Trojan

The Chinese APT (Advanced Persistent Threat) group known as APT10 (aka Stone Panda) have been observed using a relatively new tool in a recently identified campaign targeting MSPs (Managed Service providers).

CC-1805 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Cisco FindIT Discovery Utility Insecure Library Loading Vulnerability

Cisco has released details of a vulnerability affecting their FindIT network discovery tool that may allow an authenticated local user to perform a dynamic-link library (DLL) pre-loading attack.