Cyber alerts - NHS England Digital

Published Thursday 12 October 2017 (12:00) (updated 17 February 2020)

Mozilla Releases Security Update

Mozilla has released a security update to address multiple vulnerabilities in Thunderbird. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.

CC-1397 High

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Patch released to fix a critical remote code execution vulnerability in the Microsoft Malware protection engine

An update has been released by Microsoft to fix a critical remote code execution vulnerability in the Microsoft malware protection engine.

CC-1659 Medium

Published Friday 22 September 2017 (12:00) (updated 17 February 2020)

Apache Optionsbleed Vulnerability

A vulnerability within the widely used Apache Web Server has been discovered. The bug designated CVE-2017-9798 has been called "Optionsbleed", due its similarity to the deadly vulnerability Heartbleed and Ticketbleed. The vulnerability causes servers to leak pieces of arbitrary memory in a way that could expose passwords or other sensitive information within data being transmitted during a session. The risk is most pressing in shared hosting environments and only if the software is running a certain configuration.

CC-1263 Medium

Published Thursday 16 March 2017 (12:00) (updated 17 February 2020)

Apache Zero-Day Vulnerability

A zero-day vulnerability in Apache Struts version 2 has been discovered. The vulnerability is a remote code execution bug that affects the Jakarta Multipart parser.

CC-1223 Medium

Published Wednesday 1 March 2017 (12:00) (updated 17 February 2020)

Unlock26 - Ransomware-as-a-Service

A new Ransomware as a Service (RaaS) variant has recently been discovered which is preparing to spread a ransomware variant dubbed Unlock26.

CC-1321 Medium

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Trend in Spam email campaigns appearing to be from phone providers

CareCERT is aware of a trend in spam email campaigns appearing to originate from phone providers such as Vodafone or O2 with a malicious link that is obfuscated as a legitimate link.

CC-1533 Medium

Published Monday 24 July 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Update

Cisco has released a security update to address a vulnerability in its Web Security Appliance (WSA). A remote attacker could exploit this vulnerability to take control of an affected system.

CC-1787 Medium

Published Thursday 16 November 2017 (12:00) (updated 17 February 2020)

FALLCHILL: North Korean RAT

FALLCHILL is a remote access trojan (RAT) that uses a pair of malware proxies to communicate with its command and control (C2) server.

CC-1760 Low

Published Thursday 9 November 2017 (12:00) (updated 17 February 2020)

TorMoil

A vulnerability has been discovered in the Tor Browser that can reveal a user's real IP address. Once an affected user navigates to a specially crafted web page, the operating system may directly connect to the remote host, bypassing Tor Browser.

CC-1485 Medium

Published Thursday 22 June 2017 (12:00) (updated 17 February 2020)

Drupal Releases Security Updates

Drupal has released an advisory to address several vulnerabilities in Drupal versions 7.x and 8.x. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.