Cyber alerts - NHS England Digital

Published Wednesday 10 June 2020 (12:00) (updated 29 June 2021)

Microsoft Releases June 2020 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3513 Low

Published Wednesday 24 June 2020 (12:00) (updated 29 June 2021)

Baxter ExactaMix Vulnerabilties

Baxter has released details of multiple vulnerabilities affecting their ExactaMix automated compounding system. A remote unauthenticated attacker could exploit these vulnerabilities to obtain sensitive data, alter system configurations or resource, or cause a denial-of-service condition.

CC-3476 Information only

Published Thursday 28 May 2020 (12:00) (updated 29 June 2021)

Drupal Releases Security Updates

Drupal has released security updates to address vulnerabilities affecting Drupal 7, 8.7, and 8.8. A remote attacker could exploit one of these vulnerabilities to take control of an affected system.

CC-3446 Information only

Published Wednesday 6 May 2020 (12:00) (updated 29 June 2021)

WordPress Releases Security Update

WordPress 5.4 and prior versions are affected by multiple vulnerabilities. An attacker could exploit some of these vulnerabilities to take control of an affected website.

CC-3457 Information only

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Cisco Releases Security Updates for Multiple Products

Cisco has released security updates to address vulnerabilities in multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3462 Information only

Published Thursday 21 May 2020 (12:00) (updated 29 June 2021)

VMware Releases Security Update for Cloud Director

VMware has released security updates to address a vulnerability in VMware Cloud Director (formerly known as vCloud Director). A remote attacker could exploit this vulnerability to take control of an affected system.

CC-3456 Information only

Published Thursday 14 May 2020 (12:00) (updated 29 June 2021)

Mozilla Releases Security Updates for Firefox and Firefox ESR 

Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3336 Information only

Published Friday 10 January 2020 (12:00) (updated 29 June 2021)

Juniper Networks Releases Security Updates

Juniper Networks has released security updates to address multiple vulnerabilities in various Juniper products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.

CC-3407 Information only

Published Wednesday 25 March 2020 (12:00) (updated 29 June 2021)

Microsoft RCE Vulnerabilities Affecting Windows & Windows Server

Microsoft has released a security advisory to address remote code execution vulnerabilities in Adobe Type Manager Library affecting all supported versions of Windows and Windows Server operating systems. Microsoft is aware of limited, targeted attacks.

CC-3405 Low

Published Wednesday 25 March 2020 (12:00) (updated 29 June 2021)

Insulet Omnipod RF Authentication Vulnerability

Insulet Corp. has released details of an improper access control vulnerability affecting their Omnipod Insulin Management System (IMS) products. They claim that an unauthenticated user could exploit this vulnerability to intercept or modify sensitive data, or alter system settings.