Cyber alerts - NHS England Digital

Published Tuesday 15 March 2022 (11:44) (updated 27 October 2022)

Veeam Releases Security Updates to Address Vulnerabilities in Backup & Replication and Agent for Microsoft Windows

Exploitation of critical RCE vulnerabilities in Veeam Backup & Replication has been reported

Published Thursday 27 October 2022 (12:46) (updated 27 October 2022)

AliveCor KardiaMobile Vulnerabilities

CISA Advisory includes an authentication bypass vulnerability and a missing encryption vulnerability that could allow an attacker to read patient electrocardiography (EKG) results or create a denial-of-service condition

CC-4202 Information only

Published Friday 28 October 2022 (02:10) (updated 28 October 2022)

Google Releases Security Update for Chrome

Security update released to address an actively exploited zero-day vulnerability in Chrome

CC-4198 Medium

Published Tuesday 25 October 2022 (01:03) (updated 4 November 2022)

Apple Releases Security Updates for Multiple Products

The released security updates include an exploited zero-day vulnerability in iPadOS and iOS

CC-4203 Information only

Published Wednesday 2 November 2022 (12:17) (updated 2 November 2022)

OpenSSL Releases Security Updates

High impact security updates address potential RCE and a denial-of-service condition

CC-4205 Information only

Published Thursday 3 November 2022 (02:12) (updated 3 November 2022)

Citrix Releases Security Update for Hypervisor

Security update addresses four vulnerabilities affecting Citrix Hypervisor

CC-4204 Information only

Published Thursday 3 November 2022 (04:39) (updated 3 November 2022)

Cisco Releases Security Updates for Multiple Products

Eleven advisories address six High and seven Medium impact vulnerabilities for Cisco ISE, Cisco Email Security Appliance, and other product lines

CC-4206 Information only

Published Monday 7 November 2022 (11:59) (updated 7 November 2022)

Okta Releases Security Updates for Access Gateway

Security update addresses the OpenSSL remote code execution and denial-of-service vulnerabilities

CC-4207 Information only

Published Tuesday 8 November 2022 (04:19) (updated 8 November 2022)

SAP Releases November 2022 Security Updates

Scheduled security updates address vulnerabilities affecting multiple products

CC-2576 Low

Published Tuesday 7 August 2018 (12:00) (updated 9 November 2022)

Master134 Compromised WordPress Websites

Master134 is a malvertising campaign that uses compromised WordPress websites to distribute malware via drive-by downloads.