Cyber alerts - NHS England Digital

Published Wednesday 6 September 2017 (12:00) (updated 17 February 2020)

Apache Software Foundation Releases Security Update

The Apache Software Foundation has released a security update to address a vulnerability in Struts 2. A remote attacker could exploit this vulnerability to take control of an affected system.

CC-1635 Medium

Published Wednesday 13 September 2017 (12:00) (updated 17 February 2020)

BlueBorne Bluetooth Vulnerabilities

A number of Bluetooth implementation vulnerabilities known as "BlueBorne" has been released. These vulnerabilities collectively affect Windows, OS X, and Linux-kernel-based operating systems including Android and Tizen.

CC-1641 Low

Published Thursday 14 September 2017 (12:00) (updated 17 February 2020)

Backdoor Found in WordPress Plugin

A WordPress plugin called Display Widgets has been used to install a backdoor on WordPress websites. The backdoor code was found between Display Widgets version 2.6.1 (released June 30) and version 2.6.3 (released September 2).

CC-1645 Low

Published Tuesday 19 September 2017 (12:00) (updated 17 February 2020)

CCleaner Installer Distributes Malware CC-1645

It has been discovered that the maintenance application, CCleaner has been delivering Floxif - a family of malware which collects data from infected systems.

CC-1651 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

WordPress Releases Security Update

WordPress versions prior to 4.8.2 are affected by multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-1296 Low

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

Apple Releases Security Update for iWork

Apple has released a security update for MacOS 10.12 (and later) and iOS 10.0 (and later) to address a vulnerability in iWork that allows a remote attacker to obtain sensitive information.

CC-1513 Medium

Published Tuesday 11 July 2017 (12:00) (updated 17 February 2020)

ZeroAccess Trojan

ZeroAccess is a stealthy trojan which has been infecting systems since at least 2011. The trojan affects Microsoft windows operating systems.

CC-1791 Medium

Published Thursday 16 November 2017 (12:00) (updated 17 February 2020)

GIBON Ransomware

GIBON targets every file that is not located in the Windows folder. The malware is spread via emails with macro enabled attachments that will download and execute the ransomware.

CC-1308 Medium

Published Wednesday 5 April 2017 (12:00) (updated 17 February 2020)

Managed Service Providers MSP Compromised by Known Threat Actor

A cyber actor using previously documented intrusion tools has targeted major international Managed Service Providers (MSP’s) within Enterprise Services and Cloud Hosting businesses since at least May 2016.

CC-1450 Medium

Published Wednesday 7 June 2017 (12:00) (updated 17 February 2020)

Fireball Adware - Infected 250million Computers

Researchers have discovered a new adware variant named Fireball. Fireball is believed to have been developed by a Chinese digital marketing agency for the sole purpose of creating revenue through click fraud.