Cyber alerts - NHS England Digital

CC-4626 Medium

Published Wednesday 26 February 2025 (05:35) (updated 26 February 2025)

Proof-of-Concept Exploits Released for RSync Vulnerabilities

Vulnerabilities in RSync could allow an attacker to execute arbitrary code or perform path traversal

CC-4628 Medium

Published Thursday 6 March 2025 (02:11) (updated 6 March 2025)

Cisco Releases Security Advisory for Secure Client

CVE-2025-20206 could allow an attacker to execute arbitrary code with system privileges

CC-4627 High

Published Tuesday 4 March 2025 (04:11) (updated 6 March 2025)

Critical Zero-day Vulnerabilities in VMware ESXi, Workstation, and Fusion

Broadcom has addressed three exploited vulnerabilities that, when chained, can allow an attacker to access the hypervisor through a running virtual machine

CC-4630 Medium

Published Wednesday 12 March 2025 (04:34) (updated 12 March 2025)

Apple Releases Security Updates for Multiple Products

Security updates include remediation for exploited vulnerability CVE-2025-24201, which affects iOS, iPadOS, and macOS

CC-4631 Medium

Published Thursday 13 March 2025 (03:23) (updated 13 March 2025)

Cisco Releases Security Advisories for Cisco IOS XR Software

10 security advisories address multiple vulnerabilities, including seven high and three medium severity advisories

CC-4633 Medium

Published Monday 17 March 2025 (04:13) (updated 17 March 2025)

Exploitation of Apache Tomcat Vulnerability CVE-2025-24813

Exploitation of CVE-2025-24813 could allow an attacker to achieve RCE, view security sensitive files, or inject content

CC-4634 Medium

Published Thursday 20 March 2025 (12:12) (updated 20 March 2025)

Proof-of-Concept Released for Veeam Backup & Replication Vulnerability

Successful exploitation of CVE-2025-23120 could lead to remote code execution

CC-4632 Medium

Published Monday 17 March 2025 (02:39) (updated 20 March 2025)

Critical Security Incident involving GitHub Action tj-action/changed-files

Projects using the vulnerable action are at risk of exposed CI/CD secrets

CC-4606 Medium

Published Wednesday 15 January 2025 (02:27) (updated 11 March 2025)

Ivanti Releases January 2025 Updates for EPM

Updates address 4 critical and 12 high severity vulnerabilities

CC-4543 Medium

Published Friday 6 September 2024 (12:20) (updated 21 March 2025)

Cisco Releases Security Advisories Affecting Smart Licensing Utility and Identity Service Engine

Advisories address two critical vulnerabilities in Smart Licensing Utility and one medium vulnerability in Identity Service Engine