Cyber alerts - NHS England Digital

Cisco has released security updates to address vulnerabilities affecting multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3390 High

Published Wednesday 11 March 2020 (12:00) (updated 29 June 2021)

SMBGhost SMBv3 Remote Code Execution Vulnerability

Microsoft has released details of a buffer overflow vulnerability, known as SMBGhost (or Bluesday, CoronaBlue, DeepBlue 3, NexternalBlue or Redmond Drift), affecting the Server Message Block version 3.1.1 (SMBv3) protocol. It could be exploited to execute arbitrary code on vulnerable systems.

CC-3520 Low

Published Thursday 25 June 2020 (12:00) (updated 29 June 2021)

Microsoft Releases Security Updates for Windows

Microsoft has released security updates to address a vulnerability in Windows 10 version 1903. An attacker could exploit this vulnerability to overwrite or modify a protected file and gain elevated privileges.

CC-3518 Low

Published Thursday 25 June 2020 (12:00) (updated 29 June 2021)

ISC Releases Security Advisories for BIND

The Internet Systems Consortium (ISC) has released security advisories that address vulnerabilities affecting multiple versions of ISC Berkeley Internet Name Domain (BIND). A remote attacker could exploit these vulnerabilities to cause a denial-of-service condition.

CC-3483 Medium

Published Wednesday 3 June 2020 (12:00) (updated 29 June 2021)

Valak Trojan

Valak is a sophisticated modular trojan used in targeted attacks against financial and government organisations throughout Western Europe and North America. Initially used solely as a loader in IcedID and Ursnif campaigns, it appears to have undergone significant changes to improve functionality.

CC-3429 Information only

Published Friday 17 April 2020 (12:00) (updated 29 June 2021)

Oracle Releases April 2020 Security Bulletin

Oracle has released its Critical Patch Update for April 2020 to address vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.