Cyber alerts - NHS England Digital

Published Thursday 17 August 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-1551 Low

Published Wednesday 2 August 2017 (12:00) (updated 17 February 2020)

Microsoft Office Outlook Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially crafted email messages.

CC-1614 Low

Published Thursday 31 August 2017 (12:00) (updated 17 February 2020)

Cisco Meeting Server Command Injection Vulnerability

A vulnerability in the CLI command-parsing code of Cisco Meeting Server could allow an authenticated, local attacker to perform command injection and escalate their privileges to root.

CC-1596 Low

Published Tuesday 22 August 2017 (12:00) (updated 17 February 2020)

Turla APT Using KopiLuwak Malware

Turla, Advanced Persistent Threat (APT) group, is responsible for sending out malicious attachments sent to invite recipients to the G20 task force meeting on the Digital Economy.

CC-1540 Medium

Published Thursday 27 July 2017 (12:00) (updated 17 February 2020)

Joomla Releases Security Update

Joomla! has released version 3.7.4 of its Content Management System (CMS) software to address several vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-1509 Medium

Published Thursday 6 July 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of a system.

CC-1637 Low

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

Android Toast Overlay Attack

A new method of cyber attack, known as an overlay attack has been detailed. A successful overlay attack would allow a UI (user interface) to be placed over the top of the existing UI, masking what the user is actually interacting with.

CC-1662 Medium

Published Monday 25 September 2017 (12:00) (updated 17 February 2020)

Retefe Banking Trojan

Retefe is a banking Trojan which has been identified targeting organisations within the UK. he malware has been around for some time, however, it has never been very prominent when compared to the likes of Dridex .

CC-1040 Medium

Published Tuesday 3 January 2017 (12:00) (updated 17 February 2020)

PHPMailer Flaw

A critical vulnerability has been identified within the popular open source software PHPMailer which is often implemented in websites for sending emails.

CC-1328 High

Published Wednesday 12 April 2017 (12:00) (updated 17 February 2020)

Malware Delivery Campaign Using Spoofed NHS Email Addresses

CareCERT is aware of a recent spam email campaign which uses spoofed @hscic.gov.uk and @nhs.net email addresses to deliver a malicious link which, when clicked, downloads a malicious JavaScript attachment containing malware.