Cyber alerts - NHS England Digital

Progress Software Releases Critical Security Updates for MOVEit Transfer and MOVEit Gateway

Two improper authentication vulnerabilities can lead to authentication bypass

The security update addresses a critical SQL injection vulnerability that could allow an attacker to modify data and create administrative users

Authentication bypass vulnerability CVE-2024-2973 affects Session Smart Router, Conductor, and WAN Assurance Router

CLI in NX-OS software contains a command injection vulnerability CVE-2024-20399 that is being exploited in the wild

CVE-2024-26006 is a cross-site scripting vulnerability in SSL-VPN web UI

Scheduled updates for Microsoft products fix 139 vulnerabilities, including two zero-day vulnerabilities

New intelligence shows that exploitation of this RCE vulnerability does not require authentication

A high severity vulnerability could allow an attacker to execute arbitary code via SQL Injection on an affected system

Advisory addresses three security vulnerabilities that could result in DoS, RCE, or partially reading arbitrary files

Two actively exploited vulnerabilities in NetScaler ADC and NetScaler Gateway could lead to remote code execution or denial-of-service