Cyber alerts - NHS England Digital

Published Tuesday 14 November 2017 (12:00) (updated 17 February 2020)

APT28 Using DDE Vulnerability to Distribute Seduploader

Ongoing activity by APT26 (Fancy Bear) indicates they are exploiting the Dynamic Data Exchange (DDE) vulnerability in Microsoft Office to install the Seduploader malware.

CC-1877 Medium

Published Thursday 21 December 2017 (12:00) (updated 17 February 2020)

ROBOT Attack

A nineteen-year-old vulnerability has been re-discovered in the RSA implementation from different vendors which will allow Man-in-the-Middle attacks on encrypted messages.

CC-1568 Medium

Published Wednesday 9 August 2017 (12:00) (updated 17 February 2020)

Siemens Molecular Imaging Vulnerabilities

Siemens has identified four vulnerabilities in Siemens Molecular Imagining products running on Windows 7.

CC-1273 Medium

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

JSE Worm

new Worm has been recently identified which deletes user’s files, replacing them with an identically named malicious file and appends that file with .jse (JavaScript Embedded).

CC-1258 Medium

Published Wednesday 15 March 2017 (12:00) (updated 17 February 2020)

VMware Workstation and Fusion Vulnerability

VMware have released a security update to address a local code execution vulnerability in Workstation and Fusion products.

CC-1392 Medium

Published Monday 8 May 2017 (12:00) (updated 17 February 2020)

Blackmoon Malware

Blackmoon, also known as Banbra and KRBanker is a banking trojan which has recently started to gain traction in the wider threat landscape.

CC-1378 Medium

Published Wednesday 3 May 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 58.0.3029.96 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker may exploit to take control of an affected system.

CC-1068 Low

Published Thursday 12 January 2017 (12:00) (updated 17 February 2020)

Mac Tech Support Scam

Technical support scams have been in operation for many years. They come in a number of guises and change regularly in order to remain a threat. A newly registered scam website targeting Mac users was identified towards the end of 2016.

CC-1691 Medium

Published Tuesday 10 October 2017 (12:00) (updated 17 February 2020)

Malware Installation Using CHM Files

A recent spam campaign is delivering trojans via malicious Compiled HTML (CHM) files.The current phishing campaign, used to lure users into downloading the trojan malware, is using WhatsApp, a popular messaging service as a cover for its malicious intent.

CC-1136 Low

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

WordPress issues security fix

WordPress has issued a security patch that fixes 3 security issues. Amongst the issues fixed are a cross-site scripting and an SQL injection vulnerability.