Cyber alerts - NHS England Digital

Published Thursday 21 December 2017 (12:00) (updated 17 February 2020)

ROBOT Attack

A nineteen-year-old vulnerability has been re-discovered in the RSA implementation from different vendors which will allow Man-in-the-Middle attacks on encrypted messages.

CC-1866 Low

Published Tuesday 19 December 2017 (12:00) (updated 17 February 2020)

New Attack Vector using Microsoft Access

A new attack vector that utilises Microsoft Access macros feature has been discovered. An executable file is created through Microsoft Access,

CC-1861 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Mailsploit Emailing Spoofing

Mailsploit is a new way to easily spoof email addresses when sending emails. It allows the attacker to display any email address as the from address to the email recipient by modifying the header of the email.

CC-1809 Low

Published Thursday 23 November 2017 (12:00) (updated 17 February 2020)

Fake Anti-Virus Pages Used in Phishing Attack

A new type of phishing attack deception technique has been observed where malicious actors style webpages to present themselves as an anti-virus company.

CC-1782 Low

Published Wednesday 15 November 2017 (12:00) (updated 17 February 2020)

AV Gate abuses Anti-Virus Quarantine

A new technique known as AV Gate has been discovered that allows a physical user to restore quarantined files and move them to privileged areas. This technique can be used without administrator rights and can be used for privilege escalation.

CC-1719 Medium

Published Monday 23 October 2017 (12:00) (updated 17 February 2020)

Microsoft DDE Works in Outlook Too

CareCERT has previously written about Advanced Persistent Threat (APT ) groups abusing Microsoft's Dynamic Data Exchange (DDE) feature through malicious attachments

CC-1714 Medium

Published Friday 20 October 2017 (12:00) (updated 17 February 2020)

New Intel CPU Exploit BoundHook

A new post-intrusion technique, named BoundHook, has been developed targeting all Intel Central Processing Units (CPUs) with the Skylake processor or newer.

CC-1707 Medium

Published Wednesday 18 October 2017 (12:00) (updated 17 February 2020)

APT Group Abuse Microsoft Word Dynamic Data Exchange - Macro-less Code Execution

A new technique has been discovered that allows an attacker to send malicious documents that can execute code on a user's system without the use of Macros or OLE (Object Linked Embedding).

CC-1703 Medium

Published Monday 16 October 2017 (12:00) (updated 17 February 2020)

KRACK Key Re-installation Attack - WPA2 Attack

KRACK (Keyless Re-installation Attack) is a vulnerability in WPA2 (Wireless Protected Access 2) that could allow an attacker to eavesdrop on Wi-Fi traffic, reading encrypted network traffic, and in some cases, sending traffic back to the network

CC-1690 Medium

Published Monday 9 October 2017 (12:00) (updated 17 February 2020)

New Rowhammer Attack Bypassing Countermeasures

A new variation of the Rowhammer attack has been identified by the same researchers who discovered the original Rowhammer attack.