Cyber alerts - NHS England Digital

Published Wednesday 7 June 2017 (12:00) (updated 17 February 2020)

Google Releases Security Updates for Chrome

Google has released Chrome version 59.0.3071.86 for Windows, Mac, and Linux. This version addresses multiple vulnerabilities that, if exploited, can allow an attacker to take control of an affected system. This update includes 30 security fixes.

CC-1445 Medium

Published Wednesday 7 June 2017 (12:00) (updated 17 February 2020)

Split Tunnel SMTP Exploit

A new attack, methodology has been discovered within the way email encryption appliances operate and has been disclosed with details of how it can be exploited to bypass malware scanning at security gateways.

CC-1630 Low

Published Thursday 21 September 2017 (12:00) (updated 17 February 2020)

ManageEngine ADSelfService Plus - GINA Vulnerability

Several vulnerabilities have been identified in the GINA component of the ManageEngine ADSelfService Plus product

CC-1093 Low

Published Thursday 19 January 2017 (12:00) (updated 17 February 2020)

Attacks on CPUs from USB port

Studies have found that Intel CPUs (Central Processing Unit) containing a debugging interface is accessible via USB 3.0 allowing the attacker to gain full control of the machine.

CC-1524 Medium

Published Tuesday 18 July 2017 (12:00) (updated 17 February 2020)

Cisco WebEx Browser Extension Security Update

Cisco has released security updates to address a vulnerability in its WebEx browser extension on Google Chrome and Mozilla Firefox. A remote attacker could exploit this vulnerability to take control of a system.

CC-1416 Medium

Published Wednesday 17 May 2017 (12:00) (updated 17 February 2020)

Adylkuzz Cryptocurrency Mining Malware using same SMB vulnerabilities as WannaCry Ransomware

On Friday 12th May attackers exploited Microsoft SMB vulnerabilities to distribute and propagate WannaCry Ransomware (CC-1411).

CC-1383 Medium

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

Broadcom Wi-Fi Stack Vulnerability

Researchers from Google's Project Zero have discovered vulnerabilities in Broadcom's Wi-Fi chips which can allow a remote attacker to gain code execution on the chip with the added possibility of privilege escalation into the operating system kernel.

CC-1404 Medium

Published Wednesday 10 May 2017 (12:00) (updated 17 February 2020)

Bondnet Botnet

A new botnet has emerged with 15,000 infected Windows hosts taking advantage of an array of weak security practices. The botnet is currently used for cryptocurrency mining, making the attacker over $1000 per day.

CC-1382 Medium

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

SCADA Ransomware Attack - Proof of Concept

Recent research into the possibility of attacks against SCADA (Supervisory Control and Data Acquisition) systems has resulted in a proof of concept attack being developed.

CC-1143 Medium

Published Thursday 2 February 2017 (12:00) (updated 17 February 2020)

Cherwell Portal Vulnerability

A code vulnerability has been discovered in the Cherwell Portal which, if exploited, allows standard portal users (Portal Customers) to view more than their own records.