Cyber alerts - NHS England Digital

Published Tuesday 5 December 2017 (12:00) (updated 17 February 2020)

Apache Software Foundation Releases Security Updates

The Apache Software Foundation has released security updates to address vulnerabilities in Apache Struts versions 2.5 to 2.5.14. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-1856 Medium

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

TLS Bleichenbacher Attack Vulnerability

An error in the way Transport Layer Security (TLS) implements RSA encryption may leave it vulnerable to a Bleichenbacher-style attack.

CC-1837 Low

Published Thursday 7 December 2017 (12:00) (updated 17 February 2020)

TeamViewer Fixed Critical Vulnerability

A vulnerability in the Team Viewer remote control and meeting software may allow a remote attacker to execute commands on a user’s system.

CC-1722 Low

Published Tuesday 24 October 2017 (12:00) (updated 17 February 2020)

Linksys E-Series Router Vulnerabilities

Five vulnerabilities have been found in several Linksys E-series routers.

CC-1135 Medium

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

Sage 2.0 Ransomware

Sage 2.0 is a new variant of Crylocker ( CC-727 ) that has been observed in a recent spam campaign.

CC-1162 Medium

Published Thursday 9 February 2017 (12:00) (updated 17 February 2020)

New JavaScript Malware Dubbed KopiLuwak

The cyber espionage group ‘Turla’ has been using a new piece of JavaScript malware to profile victims.

CC-1429 Low

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

Malware Uses Fake WordPress API Domain to Steal Sensitive Cookies

Security researchers have found WordPress sites that were altered to secretly direct cookies for user and admin accounts to a rogue domain imitating the WordPress API.

CC-1550 Medium

Published Monday 31 July 2017 (12:00) (updated 17 February 2020)

McAfee Releases Security Bulletin for Web Gateway

McAfee has released a security bulletin to address multiple vulnerabilities in Web Gateway. Some of these vulnerabilities could allow a remote attacker to take control of an affected system.

CC-1655 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Samba Releases Security Updates

The Samba Team has released security updates to address the following vulnerabilities in Samba:

CC-1592 Medium

Published Tuesday 22 August 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update

Mozilla has released a security update to address multiple vulnerabilities in Thunderbird. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.