Cyber alerts - NHS England Digital

Published Wednesday 15 November 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Updates

Mozilla has released security updates to address multiple vulnerabilities in Firefox 57 and ESR 52.5. An attacker could exploit these vulnerabilities to take control of an affected system.

CC-1785 Low

Published Wednesday 15 November 2017 (12:00) (updated 17 February 2020)

Microsoft Releases November 2017 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1680 Low

Published Thursday 5 October 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates for iOS

Apple has released iOS 11.0.2 to address vulnerabilities in previous versions of iOS. Exploitation of some of these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1671 Low

Published Friday 29 September 2017 (12:00) (updated 17 February 2020)

Illusion Gap Attack Used to Bypass Windows Defender

Illusion Gap can allow malware to bypass Windows Defender. Windows Defender is the antivirus software included and enabled by default on all recent Windows operating systems.

CC-1612 Medium

Published Wednesday 30 August 2017 (12:00) (updated 17 February 2020)

Defray Ransomware

A new strain of ransomware known as Defray has been discovered. Similar to other strains of ransomware, Defray is distributed via e-mail and requires social engineering to be successful.

CC-1609 Medium

Published Tuesday 29 August 2017 (12:00) (updated 17 February 2020)

BitPaymer Ransomware

tPaymer, also known as WPEncrypt, is a relatively new ransomware variant that first appeared in mid-2017.

CC-1566 Medium

Published Wednesday 9 August 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Acrobat DC, Acrobat Reader DC, Acrobat 2017, Acrobat Reader 2017, Acrobat XI, and Reader XI.

CC-1366 Low

Published Thursday 27 April 2017 (12:00) (updated 17 February 2020)

Microsoft Edge Vulnerability allows Cookie and Password Theft

It's been discovered that an attacker is able to load and execute malicious code on high prolific sites such as social media. Social engineering techniques are used to persuade a user to click on the malicious link.

CC-1430 Medium

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

EternalRocks

Security researchers have identified a new strain of malware that targets the same vulnerability that helped WannaCry to spread. Researchers have named it EternalRocks.

CC-1398 Medium

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Flash Player and Adobe Experience Manager Forms. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system.