Cyber alerts - NHS England Digital

Published Tuesday 26 September 2017 (12:00) (updated 17 February 2020)

Oracle Patches Apache Vulnerabilities

Oracle has released security updates to address Apache Struts 2 vulnerabilities found across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-1501 Medium

Published Monday 3 July 2017 (12:00) (updated 17 February 2020)

Cisco Release Security Updates

Cisco has released a security advisory to address Simple Network Management Protocol (SNMP) vulnerabilities in its IOS and IOS XE software. A remote attacker could exploit these vulnerabilities to take control of an affected system.

CC-1422 Low

Published Thursday 18 May 2017 (12:00) (updated 17 February 2020)

WordPress Releases Security Update

WordPress versions prior to 4.7.5 are affected by multiple vulnerabilities. A remote attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-1424 Medium

Published Tuesday 23 May 2017 (12:00) (updated 17 February 2020)

Malware Framework - Athena

The latest document leak from the WikiLeaks Vault 7 series includes documentation for Athena - an implant with the ability to target and infect any Microsoft Windows operating system from XP through to 10.

CC-1387 Low

Published Thursday 4 May 2017 (12:00) (updated 17 February 2020)

Microsoft Ending Security Updates for Windows 10 version 1507

After May 9, 2017, devices running Windows 10 version 1507 will no longer receive security updates.

CC-1448 Medium

Published Tuesday 6 June 2017 (12:00) (updated 17 February 2020)

SNMP Abuse

The Simple Network Management Protocol (SNMP) may be abused to provide unauthorised access to network devices. SNMP provides a standardised framework for a common language that is used for monitoring and managing devices in a network.

CC-1471 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

MacSpy

MacSpy is advertised as the 'most sophisticated Mac spyware ever' and it's free.

CC-1463 Medium

Published Thursday 15 June 2017 (12:00) (updated 17 February 2020)

Forgotten Debugging Tool and Password Leaves Cisco DCNM Vulnerable

In a recent Cisco advisory release, two vulnerabilities have been found within Cisco Prime Data Centre Network Manager (DCNM).

CC-1333 Low

Published Wednesday 19 April 2017 (12:00) (updated 17 February 2020)

CLDAP Used in DDoS Attacks

DDoS attacks using the CLDAP (Connectionless Lightweight Directory Access Protocol) protocol have been reported and could result in serious damage from a new reflection attack.

CC-1317 Low

Published Tuesday 11 April 2017 (12:00) (updated 17 February 2020)

Fake SEO plugin backdoors into WordPress installations

A fake SEO plugin is being used by attackers to compromise WordPress installations. The plugin is called WP-Base-SEO, and is a forgery of a legitimate search engine optimization plugin called WordPress SEO Tools.