Cyber alerts - NHS England Digital

Published Tuesday 18 July 2017 (12:00) (updated 17 February 2020)

Kerberos bypass Orpheus Lyre flaw

A vulnerability affecting two popular Kerberos protocol implementations have been identified as vulnerable to an attack.

CC-1549 Medium

Published Monday 31 July 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address several vulnerabilities affecting multiple products. Exploitation of one of these vulnerabilities may allow a remote attacker to cause a denial-of-service condition.

CC-1137 Medium

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

Malicious Spam Campaign Dropping Malware

An on-going malicious spam campaign has been recently observed circulating information-stealing Trojans such as Vawtrak , Hancitor and Pony Loader.

CC-1847 Low

Published Tuesday 12 December 2017 (12:00) (updated 17 February 2020)

Process Doppelgänging

A new malware evasion technique has been discovered, called Process Doppelgänging, that exploits a built-in Windows New Technology File System (NTFS) transaction function, allowing malware to be bundled into a Windows system undetected.

CC-1851 Medium

Published Wednesday 13 December 2017 (12:00) (updated 17 February 2020)

Simda Backdoor Trojan

Simda (AKA Rloader) is a backdoor trojan that has previously been used to create a botnet with over 770,000 infected devices across multiple countries, including the UK, USA, France and Turkey.

CC-1850 Low

Published Wednesday 13 December 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Updates

Apple has released security updates to address vulnerabilities in AirPort Base Station. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1425 Medium

Published Wednesday 24 May 2017 (12:00) (updated 17 February 2020)

Malware Framework - AfterMidnight and Assassin

Documentation pertaining to two malware platforms named AfterMIdnight (AM) and Assassin was recently released. The frameworks implement backdoor features which can allow an attacker to take control of affected systems.

CC-1420 Medium

Published Thursday 18 May 2017 (12:00) (updated 17 February 2020)

New Infostealer Discovered in The Wild

A new malware variant has been discovered which has been dubbed ‘Paipeu’ by security researchers after observing an attack in an attempt to steal data.

CC-1640 Low

Published Thursday 14 September 2017 (12:00) (updated 17 February 2020)

Secure Kernel Extension Loading SKEL Bypass

A new security feature added in MacOS High Sierra (10.13) named "Secure Kernel Extension Loading" (SKEL) can be bypassed to allow the loading of malicious kernel extensions.

CC-1699 Low

Published Thursday 12 October 2017 (12:00) (updated 17 February 2020)

Coinhive and Cryptojacking

There has been a recent sharp increase in cryptojacking.