In this paper, the problem of the networked set-membership state estimation is discussed for a class of nonlinear discrete time-varying systems subject to cyber attacks and time delays. Two forms of malicious attacks (i.e. Denial-of-Service (DoS) attack and bias injection attack) are taken into account to describe the adversary's attempt to destroy/deteriorate the system performance via communication network. It is the aim of the investigated issue to propose a set-membership state estimator ensuring the required estimation performance despite the existence of both the external mixed attacks and internal time delays. By resorting to the feasibility of a series of matrix inequalities, sufficient conditions are provided for the solvability of the addressed state estimator design problem. Furthermore, an optimisation strategy is developed with the purpose of seeking the local optimal estimator parameters. At last, a numerical simulation example is presented to demonstrate the effectiveness of the proposed theoretical algorithm.