Cyber alerts - NHS England Digital

Published Thursday 6 April 2017 (12:00) (updated 17 February 2020)

PyCL Ransomware

A new ransomware has been identified by security researchers. PyCL has recently been added to an already over-saturated ransomware market.

CC-1340 Medium

Published Thursday 20 April 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates For Chrome

Google has released Chrome version 58.0.3029.81 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that an attacker may exploit to take control of an affected system.

CC-1831 Medium

Published Monday 4 December 2017 (12:00) (updated 17 February 2020)

Russian Anti-Virus Warning from NCSC

The National Cyber Security Centre (NCSC) has issued a statement that they are investigating the usage of Russian anti-virus products within the government.

CC-1835 Medium

Published Wednesday 6 December 2017 (12:00) (updated 17 February 2020)

Gozi ISFB Information-Stealing Trojan

The Gozi ISFB family of information-stealing trojans is designed to obtain banking credentials by recording keystrokes, browsing history, clipboard information, and details of running programs.

CC-1092 Medium

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Social Engineering Targeting

Attackers are setting up email accounts registered on webmail services such as Hotmail in the name of an employee at a CCG/GP practice or supplier.

CC-1468 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

Malicious Email Attachment Downloads and Executes Malware On Mouse Hover Over

Researchers have discovered a new malware delivery technique which only requires the user to open a malicious PowerPoint Document and hover over a link.

CC-1487 Medium

Published Thursday 22 June 2017 (12:00) (updated 17 February 2020)

Stack Clash Linux vulnerability

The Stack Clash is a vulnerability in the memory management in the affected platforms. It can be exploited by attackers to corrupt memory and execute arbitrary code.

CC-1426 Medium

Published Thursday 25 May 2017 (12:00) (updated 17 February 2020)

Google Chrome flaw could allow Windows credential theft

A flaw in Google Chrome's web browser could allow attackers to plant a malicious file onto a target system.

CC-1754 Medium

Published Wednesday 8 November 2017 (12:00) (updated 17 February 2020)

"GhostWriter" Vulnerability Affecting Amazon S3 Services

A vulnerability called “GhostWriter” has been discovered affecting Amazon Web Services’ (AWS) Simple Storage Service (S3). S3 is a storage solution within AWS.

CC-1704 Low

Published Tuesday 17 October 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address a vulnerability in Adobe Flash Player. A remote attacker can exploit this vulnerability to take control of an affected system.