Cyber alerts - NHS England Digital

Published Thursday 25 April 2024 (11:00) (updated 25 April 2024)

Cisco Releases Security Updates Addressing ArcaneDoor Campaign, Exploited Vulnerabilities in ASA and FTD

The security advisory addresses three vulnerabilities in Cisco ASA and FTD software that are being actively exploited in the ArcaneDoor campaign

CC-4477 High

Published Friday 12 April 2024 (02:15) (updated 18 April 2024)

Palo Alto Releases Critical Security Update for PAN-OS GlobalProtect Gateway

Successful exploitation of CVE-2024-3400 could lead to remote code execution

CC-4455 High

Published Tuesday 20 February 2024 (02:12) (updated 22 February 2024)

ConnectWise Releases Critical Security Update for ScreenConnect

Exploitation of these vulnerabilities could allow an unauthenticated remote attacker to execute arbitrary code

CC-4452 High

Published Friday 9 February 2024 (11:54) (updated 9 February 2024)

Critical Out-of-Bounds Write Vulnerability CVE-2024-21762 in FortiOS and FortiProxy

This vulnerability could allow a remote unauthenticated attacker to execute arbitrary code or command in FortiOS and FortiProxy SSL-VPN devices

CC-4446 High

Published Wednesday 31 January 2024 (03:45) (updated 15 February 2024)

Ivanti Releases Updates for Five Critical Vulnerabilities in Connect Secure, Policy Secure, and ZTA gateways

Public proof-of-concept exploit code available and exploitation of vulnerabilities has been reported

CC-4432 High

Published Thursday 11 January 2024 (02:25) (updated 16 January 2024)

Active Exploitation of Two Zero-Day Vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure Gateways

Ivanti has disclosed two zero-day vulnerabilities in Ivanti Connect Secure (ICS) and Ivanti Policy Secure that can allow remote attackers to execute arbitrary commands on targeted devices

CC-4420 High

Published Wednesday 13 December 2023 (10:51) (updated 13 December 2023)

Critical RCE Vulnerability in Atlassian Confluence Data Center and Confluence Server

Template injection vulnerability CVE-2023-22522 could lead to remote code execution

CC-4401 High

Published Tuesday 31 October 2023 (02:40) (updated 9 November 2023)

Atlassian Releases Security Updates for Critical Vulnerabilities in Confluence Data Center and Confluence Server

The security update addresses one improper authorisation vulnerability and one broken access control vulnerability in Confluence Data Center and Confluence Server

CC-4392 High

Published Thursday 26 October 2023 (02:46) (updated 26 October 2023)

Citrix Releases Critical Security Updates for NetScaler ADC and NetScaler Gateway

Citrix has released critical security updates addressing one Critical and one High severity vulnerability in NetScaler ADC and NetScaler Gateway

CC-4395 High

Published Tuesday 17 October 2023 (04:50) (updated 17 October 2023)

Cisco Releases Security Advisory for Actively Exploited Vulnerability CVE-2023-20198

The security advisory addresses a critical privilege escalation vulnerability found in Cisco IOS XE Software Web UI