Cyber alerts - NHS England Digital

Published Wednesday 3 May 2017 (12:00) (updated 17 February 2020)

StringBleed SNMP Vulnerability

A new vulnerability found in a number of devices offering SNMP (Simple Network Management Protocol) functionality can allow an remote, unauthenticated attacker to launch attacks against the affected devices with full read/write privileges which could result in widespread compromises.

CC-1385 Low

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

IPv6 Vulnerability

A vulnerability has been discovered in the mechanisms of IPv6 transition which allow the set-up of egress communication channels over an IPv4-only or dual-stack Network Intrusion Detection System (NIDS).

CC-1859 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Symantec Encryption Desktop Local Privilege Escalation

A vulnerability in the kernel driver, PGPwded.sys, allows an attacker to attain arbitrary hard disk read and write access at sector level.

CC-1857 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Cisco NX-OS Software TCP Vulnerability

A vulnerability in the Transmission Control Protocol (TCP) stack of the Cisco NX-OS software may allow a remote, unauthenticated attacker to cause a denial-of-service (DoS) condition.

CC-1670 Low

Published Thursday 28 September 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1472 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Shockwave Player, Captivate, and Digital Editions. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1303 Low

Published Tuesday 4 April 2017 (12:00) (updated 17 February 2020)

IIS Zero Day Vulnerability Will Likely Never be Patched

A vulnerability found in Microsoft’s Internet Information Services (IIS) web server technology has been publicly detailed along with proof of concept exploit code.

CC-1320 Low

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Sathurbot Botnet

A new botnet has been discovered compromising WordPress sites and spreads a backdoor downloader called Sathurbot.

CC-1697 Low

Published Wednesday 11 October 2017 (12:00) (updated 17 February 2020)

SYSCON Backdoor Uses FTP as a C2 Channel

A botnet has been found that uses an unusual method for its bots to communicate to a Command and Control (C2) server.

CC-1288 Low

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

Difobot Worm

Phishing emails claiming to come from HSBC are tricking user’s to install the information stealing worm, Difobot.