Cyber alerts - NHS England Digital

Published Monday 9 October 2017 (12:00) (updated 17 February 2020)

Wordpress plugins with zero-day vulnerabilities

Three WordPress plugins have zero-day vulnerabilities which can give attacker remote access to the compromised site without having to authenticate themselves.

CC-1714 Medium

Published Friday 20 October 2017 (12:00) (updated 17 February 2020)

New Intel CPU Exploit BoundHook

A new post-intrusion technique, named BoundHook, has been developed targeting all Intel Central Processing Units (CPUs) with the Skylake processor or newer.

CC-1570 Medium

Published Thursday 10 August 2017 (12:00) (updated 17 February 2020)

Juniper Networks Releases Junos OS Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in Junos OS. A remote attacker could exploit one of these vulnerabilities to take control of an affected system

CC-1484 Medium

Published Thursday 22 June 2017 (12:00) (updated 17 February 2020)

Cisco Releases Security Updates

Cisco has released updates to address several vulnerabilities affecting multiple products. A remote attacker can exploit one of these vulnerabilities to take control of a system.

CC-1291 Medium

Published Thursday 23 March 2017 (12:00) (updated 17 February 2020)

DoubleAgent Code-Injection Attack

Researchers have discovered a new Windows vulnerability which can allow an attacker full control of an affected system.

CC-1800 Medium

Published Tuesday 21 November 2017 (12:00) (updated 17 February 2020)

Intel vPro Vulnerabilities

Intel has released details of several vulnerabilities related to its vPro remote-management suite, specifically the Management Engine (ME) 11.x, Server Platform Services (SPS) 4.0.x and the Trusted Execution Engine (TXE) 3.0.x.

CC-1120 Medium

Published Thursday 26 January 2017 (12:00) (updated 17 February 2020)

Oracles First Critical Patch Update of 2017 Identifies 270 flaws

Oracle’s Critical Patch Update (CPU) is a scheduled quarterly release designed to close holes in the security of many of Oracle’s product lines. The latest release offers fixes for over 270 flaws throughout Oracle’s various product lines.

CC-1861 Low

Published Thursday 14 December 2017 (12:00) (updated 17 February 2020)

Mailsploit Emailing Spoofing

Mailsploit is a new way to easily spoof email addresses when sending emails. It allows the attacker to display any email address as the from address to the email recipient by modifying the header of the email.

CC-1660 Low

Published Friday 22 September 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 61.0.3163.100 for Windows, Mac, and Linux. This update addresses multiple vulnerabilities that an attacker may exploit to cause a denial-of-service condition.

CC-1529 Medium

Published Wednesday 19 July 2017 (12:00) (updated 17 February 2020)

Oracle Releases Security Bulletin

Oracle has released its Critical Patch Update for July 2017 to address 308 vulnerabilities across multiple products. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system.