Cyber alerts - NHS England Digital

Published Thursday 18 May 2017 (12:00) (updated 17 February 2020)

Joomla Releases Security Update for CMS

Joomla! has released version 3.7.1 of its Content Management System (CMS) software to address a vulnerability. Exploitation of this vulnerability may allow a remote attacker to take control of an affected website.

CC-1389 Medium

Published Friday 5 May 2017 (12:00) (updated 17 February 2020)

Konni - Remote Access Trojan

Remote Access Trojan (RAT) named Konni has been discovered by researchers and is believed to have been in operation for a number of years, evading detection by the security community whilst targeting public organisations.

CC-1600 Low

Published Thursday 24 August 2017 (12:00) (updated 17 February 2020)

APT28 Fancy Bears Name Footballers

Advanced Persistent Threat Actors 28 (APT28), also known as Tsar Team or FancyBear, have obtained and leaked confidential medical data of 25 footballers.

CC-1297 Medium

Published Thursday 30 March 2017 (12:00) (updated 17 February 2020)

LLTP Ransomware

A new ransomware has been identified based on the Venus Locker ransomware .

CC-1654 Medium

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

Joomla Security Update

Joomla! has released version 3.8.0 of its Content Management System (CMS) software to address a vulnerability. A remote attacker could exploit this vulnerability to obtain access to sensitive information.

CC-1479 Medium

Published Wednesday 21 June 2017 (12:00) (updated 17 February 2020)

US-CERT Issues Warning on North Korean Actors exploiting unpatched systems

U.S. CERT has issued an alert on June 15th 2017 warning of pending cyber activity by The Democratic People’s Republic of North Korea. (DPRNK)

CC-1514 Medium

Published Tuesday 11 July 2017 (12:00) (updated 17 February 2020)

RSA-1024 Private Key Extraction Made Possible

A collaboration of security researchers have discovered a vulnerability in the Libgcrypt module of GnuGP that could allow a threat actor to recover the private key.

CC-1542 Low

Published Thursday 27 July 2017 (12:00) (updated 17 February 2020)

Devils Ivy

Devils Ivy is a buffer overflow vulnerability which could open millions of Internet of Things (IoT) devices to a Remote Code Execution (RCE) attack.

CC-1158 Low

Published Thursday 9 February 2017 (12:00) (updated 17 February 2020)

SQL Slammer Makes a Comeback

A recent campaign utilising SQL Slammer Worm has been discovered, this malware had been dormant for over a decade.

CC-1745 Low

Published Tuesday 7 November 2017 (12:00) (updated 17 February 2020)

Google Releases Security Update for Chrome

Google has updated Chrome 62.0.3202.82 to version 62.0.3202.89 for Windows, Mac, and Linux. The new update addresses vulnerabilities that an attacker could exploit to take control of an affected system.