Cyber alerts - NHS England Digital

Published Tuesday 3 October 2017 (12:00) (updated 17 February 2020)

Dnsmasq Releases Security Update

Dnsmasq versions 2.77 and prior contain multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

CC-1708 Low

Published Thursday 19 October 2017 (12:00) (updated 17 February 2020)

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for October 2017 to address 252 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1723 Low

Published Tuesday 24 October 2017 (12:00) (updated 17 February 2020)

Data Breach at Private Plastic Surgery Clinic

Hacking group The Dark Overlord has allegedly stolen data during a cyber attack on the London Bridge Plastic Surgery (LBPS).

CC-1327 Medium

Published Wednesday 12 April 2017 (12:00) (updated 17 February 2020)

Microsoft Patch Tuesday - April

Microsoft has released April's Patch Tuesday in the new Security Update Guide format. There are 61 security updates for products such as its operating systems, browsers, the Office suite, and others.

CC-1312 Low

Published Thursday 6 April 2017 (12:00) (updated 17 February 2020)

Adobe Reader Backdoor

A Chinese APT (Advanced Persistent Threat) group have been recently observed using an Adobe Reader installer as a Trojan for a new customised backdoor.

CC-1307 Medium

Published Wednesday 5 April 2017 (12:00) (updated 17 February 2020)

Terror Exploit Kit

new Exploit kit (EK) has been identified delivering a crypto-currency miner payload. The Terror EK stands out of the crowd because it is believed to be developed by a single person.

CC-1362 Low

Published Thursday 27 April 2017 (12:00) (updated 17 February 2020)

Phishing Attack Exploiting Flaw In Browsers

Security researchers have discovered a phishing attack exploiting a known vulnerability in the Chrome, Firefox and Opera web browsers to display their fake domain names as the authentic websites.

CC-1809 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Fake Anti-Virus Pages Used in Phishing Attack

A new type of phishing attack deception technique has been observed where malicious actors style webpages to present themselves as an anti-virus company.

CC-1039 Low

Published Tuesday 3 January 2017 (12:00) (updated 17 February 2020)

New Phishing Delivery Method

A new technique is being used in a phishing campaign designed to steal banking data with the help of leveraging tactics associated with malware.

CC-1160 Medium

Published Thursday 9 February 2017 (12:00) (updated 17 February 2020)

Remote Denial Of Service Zero-Day Code Gets Public Release

A Zero-day vulnerability left unpatched by Microsoft for 3 months has been publically released by a researcher prior to the release of a patch.