Cyber alerts - NHS England Digital

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Attacks Detected With New Microsoft Office Zero-Day

A new zero-day vulnerability has been discovered affecting all versions of Microsoft Office. The discovery allows attackers to execute code on targeted machines and will also let them install various malware such as Latentbot.

CC-1706 Medium

Published Wednesday 18 October 2017 (12:00) (updated 17 February 2020)

RSA Encryption Key Vulnerability

Due to a vulnerability in the chipsets that are used to generate RSA encryption keys, the security of stored passwords, encrypted disks and documents have been weakened.

CC-1269 Medium

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

Microsoft Patch Tuesday - March

Microsoft has released 17 updates to address 140 vulnerabilities, 47 of which were regarded as critical in Microsoft software.

CC-1442 Medium

Published Thursday 1 June 2017 (12:00) (updated 17 February 2020)

Tech Support Scam Exploiting WannaCry Outbreak

A new tech support scam is using the recent WannaCry ransomware outbreak to trick users. One site uses the domain ‘securityagainstwannacry[.]com’ to appear legitimate.

CC-1480 Medium

Published Wednesday 21 June 2017 (12:00) (updated 17 February 2020)

PHP rootkit designed to take over a server

A Dutch developer has created a rootkit that hides in PHP server modules that could be used by attackers to take over web servers.

CC-1839 Low

Published Thursday 7 December 2017 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has released Chrome version 63.0.3239.84 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.

CC-1804 Medium

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Windows ASLR Vulnerability

Address Space Layout Randomisation (ASLR) protects against code-reuse and memory overflow attacks by loading executables at non-predictable locations.

CC-1750 Low

Published Wednesday 8 November 2017 (12:00) (updated 17 February 2020)

Joomla! Releases Security Updates

Joomla! has released version 3.8.2 of its content management system (CMS) software to address multiple vulnerabilities. A remote attacker could exploit one of these vulnerabilities to obtain sensitive information.

CC-1825 Medium

Published Thursday 30 November 2017 (12:00) (updated 17 February 2020)

Andromeda Modular Botnet

Andromeda (also known as Gamarue) is an HTTP-based modular botnet with anti-detection and anti-analysis capabilities. Activity has been based primarily around the US, Japan and Turkey.

CC-1653 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address vulnerabilities affecting multiple products. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.