Cyber alerts - NHS England Digital

CC-4343 Information only

Published Wednesday 21 June 2023 (03:23) (updated 26 June 2023)

Zyxel Releases Security Update

Update addresses a Critical vulnerability in several Network Attached Storage (NAS) devices

CC-4349 Medium

Published Thursday 29 June 2023 (02:36) (updated 29 June 2023)

Critical Vulnerability in Arcserve UDP Backup Software

Proof-of-concept released for authentication bypass vulnerability CVE-2023-26258

CC-4350 Low

Published Friday 30 June 2023 (02:15) (updated 30 June 2023)

Critical Vulnerability in Medtronic Paceart Optima System

The Critical vulnerability could allow an unauthenticated user to perform remote code execution or create a DoS condition

CC-4351 Medium

Published Thursday 6 July 2023 (03:15) (updated 6 July 2023)

Progress Software Releases July 2023 Service Pack for MOVEit Transfer

Service pack includes security updates for 3 vulnerabilities, 1 Critical and 2 High

CC-4352 Medium

Published Tuesday 11 July 2023 (03:42) (updated 11 July 2023)

Apple Releases Rapid Security Responses for Actively Exploited Vulnerability CVE-2023-37450

The exploited zero-day vulnerability in Safari, iOS, iPadOS, and macOS Ventura could lead to arbitrary code execution

CC-4355 Medium

Published Wednesday 12 July 2023 (02:43) (updated 12 July 2023)

FortiOS and FortiProxy Impacted By Stack-Based Buffer Overflow

FortiOS and FortiProxy are vulnerable to a stack-based buffer overflow that may allow a remote attacker to execute arbitrary code or commands

CC-4356 Medium

Published Wednesday 12 July 2023 (03:33) (updated 12 July 2023)

Microsoft Releases July 2023 Security Updates

Scheduled updates for Microsoft products, including security updates for 6 zero-day vulnerabilities

CC-4354 Medium

Published Wednesday 12 July 2023 (04:16) (updated 12 July 2023)

Microsoft Office and Windows HTML Remote Code Execution Vulnerability

Zero-day vulnerability CVE-2023-36884 is being exploited in the wild

CC-4353 Medium

Published Wednesday 12 July 2023 (04:41) (updated 13 July 2023)

Citrix Releases Security Advisory Addressing Vulnerabilities in Secure Access Clients for Windows and Ubuntu

Citrix Secure Access clients for Windows and Ubuntu are impacted by security vulnerabilities that may lead to local privilege escalation or remote code execution

CC-4307 Information only

Published Friday 21 April 2023 (01:13) (updated 13 July 2023)

Critical Update for VMware Aria Operations for Logs

VMware has released a Critical security update to address two vulnerabilities in VMware Aria Operations for Logs