Cyber alerts - NHS England Digital

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Intel Critical Privilege Escalation Vulnerability

A newly patched flaw found in a number of Intel's remote management technologies have been found to have held a highly critical privilege escalation vulnerability.

CC-1400 Medium

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Microsoft Releases May 2017 Security Updates

Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker can exploit some of these vulnerabilities to take control of a system.

CC-1794 Medium

Published Thursday 16 November 2017 (12:00) (updated 17 February 2020)

Eavesdropper: The Mobile Vulnerability Exposing Business Apps

A vulnerability has been found in the Twilio SDK and Rest API that provides standardised voice and text communication capabilities to mobile applications.

CC-1622 Low

Published Monday 4 September 2017 (12:00) (updated 17 February 2020)

Vault 7 - AngelFire

Continuing in the Vault 7 series of leaks, WikiLeaks has published the details of a CIA project called AngelFire, which targets the Microsoft Windows operating system (OS).

CC-1619 Medium

Published Friday 1 September 2017 (12:00) (updated 17 February 2020)

Russian APTs And WhiteBear Related Activity

The Russian APT group Turla has been active against defence, diplomatic and political targets, using a toolset known as WhiteBear .

CC-1548 Low

Published Wednesday 2 August 2017 (12:00) (updated 17 February 2020)

Microsoft Office Outlook Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Office improperly discloses the contents of its memory. An attacker who exploited the vulnerability could use the information to compromise the user’s computer or data.

CC-1324 Medium

Published Wednesday 12 April 2017 (12:00) (updated 17 February 2020)

Adobe Releases Security Updates

Adobe has released security updates to address vulnerabilities in Adobe Campaign, Flash Player, Acrobat and Reader, Photoshop CC, and Creative Cloud.

CC-1703 Medium

Published Monday 16 October 2017 (12:00) (updated 17 February 2020)

KRACK Key Re-installation Attack - WPA2 Attack

KRACK (Keyless Re-installation Attack) is a vulnerability in WPA2 (Wireless Protected Access 2) that could allow an attacker to eavesdrop on Wi-Fi traffic, reading encrypted network traffic, and in some cases, sending traffic back to the network

CC-1720 Medium

Published Monday 23 October 2017 (12:00) (updated 17 February 2020)

Adobe Flash Vulnerability Used by APT 28

The APT group, APT28 (aka FancyBear), are attempting to use an Adobe Flash Zero Day exploit which was first identified on 10 October 2017.

CC-1495 Medium

Published Thursday 29 June 2017 (12:00) (updated 17 February 2020)

Brutal Kangaroo

Leaked documents have detailed a malicious software codenamed ‘Brutal Kangaroo’ which can be used to infect targets' air-gapped computers with malware.