Cyber alerts - NHS England Digital

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

Advanced Word Document Infection

Security researchers have dissected a recent malware campaign which uses malicious Microsoft Word documents with new techniques to avoid detection.

CC-1140 Low

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

DoS Vulnerability in Samba

A known vulnerability in older versions of Samba has been exploited more than usual during the past week.

CC-1150 Medium

Published Tuesday 7 February 2017 (12:00) (updated 17 February 2020)

Cisco Clock Signal Component Issue

Cisco has released a hardware advisory for a clock signal component used in some of its hardware devices, which include routers and switches. Devices that contain the faulty component could potentially fail after 18 months of use.

CC-1105 Medium

Published Wednesday 25 January 2017 (12:00) (updated 17 February 2020)

HMRC Seasonal Spear Phishing Emails

Spear phishing emails appearing to be from HM Revenue & Customs (HMRC) are known to increase in volume from January to March, towards the end of the UK financial year.

CC-1280 Medium

Published Monday 20 March 2017 (12:00) (updated 17 February 2020)

Cisco IOS and IOS XE Software Cluster Management Protocol Remote Code Execution Vulnerability

A critical vulnerability in the Cisco Cluster Management Protocol (CMP) has been identified.

CC-1316 Low

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Dimnie Trojan

A new phishing campaign that attempts to infect computers with an advanced malware trojan has been discovered.

CC-1330 Medium

Published Thursday 13 April 2017 (12:00) (updated 17 February 2020)

ISC Releases Security Updates for BIND

The Internet Systems Consortium (ISC) has released updates that address multiple vulnerabilities in BIND. A remote attacker could exploit any of these vulnerabilities to cause a denial-of-service condition.

CC-1466 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

LatentBot Trojan spreading via the Rig Exploit Kit

LatentBot has been around since 2013, A recent campaign has been observed which is distributing LatentBot through the Rig Exploit Kit (EK).

CC-1626 Medium

Published Wednesday 6 September 2017 (12:00) (updated 17 February 2020)

APT Groups Exploiting Known Vulnerability in Microsoft Office

A known vulnerability which exists in Microsoft Office and WordPad is currently being targeted by attackers despite Microsoft issuing a patch for this back in April 2017. The vulnerability is CVE-2017-0199 and is a logic bug.

CC-1402 Medium

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Microsoft update to Microsoft Edge and Internet Explorer 11 blocks access to sites using SHA-1 SSL-TLS Certificates

Beginning May 9, 2017, Microsoft released updates to Microsoft Edge and Internet Explorer 11 to block sites that are protected with a SHA-1 certificate from loading and to display an invalid certificate warning.