Cyber alerts - NHS England Digital

Published Friday 26 September 2025 (11:30) (updated 26 September 2025)

Active campaign targeting vulnerabilities in Cisco VPN devices

Attacker attributed to ArcaneDoor campaign (CC-4483) has exploited CVE-2025-20333, CVE-2025-20362, and CVE-2025-20363 to install a sophisticated bootkit for persistent stealthy access to affected devices

CC-4704 Medium

Published Tuesday 30 September 2025 (02:33) (updated 30 September 2025)

Broadcom Releases Security Updates for VMware Aria Operations, Tools, and Cloud Foundation

Security advisory addresses two high severity and one medium severity vulnerabilities that could result in privilege escalation and disclosure of user credentials in VMware Aria Operations, Tools, and Cloud Foundation

CC-4705 High

Published Monday 6 October 2025 (12:00) (updated 6 October 2025)

Oracle Releases Security Advisory for E-Business Suite

Oracle has reported exploitation of CVE-2025-61882 in the wild as a zero-day vulnerability which, if successfully exploited, could allow unauthenticated remote code execution on affected E-Business Suite appliances

CC-4707 Medium

Published Tuesday 14 October 2025 (02:07) (updated 14 October 2025)

Veeam Releases Security Updates for Backup & Replication and Windows Agent

Security bulletin addresses critical severity vulnerabilities that could allow for remote code execution and privilege escalation

CC-4706 High

Published Monday 13 October 2025 (02:34) (updated 16 October 2025)

Oracle Releases Security Advisory to address CVE-2025-61884 affecting E-Business Suite

Oracle has released an out-of-band security update addressing CVE-2025-61884, which, if successfully exploited, could lead to unauthenticated information disclosure

CC-4709 High

Published Wednesday 15 October 2025 (04:02) (updated 16 October 2025)

F5 Issues Statement on Compromise of Internal F5 Networks

F5 has acknowledged source code and details about undisclosed vulnerabilities have been stolen by a state-sponsored attacker, but no exploitation has been observed

CC-4710 Medium

Published Thursday 23 October 2025 (11:34) (updated 23 October 2025)

Oracle Releases Security Advisory to Address Two Critical Severity Vulnerabilities in E-Business Suite

Oracle has released a quarterly rollup security advisory addressing CVE-2025-53072 and CVE-2025-62481, which, if successfully exploited, could lead to unauthenticated takeover of Oracle Marketing

CC-4711 High

Published Friday 24 October 2025 (11:27) (updated 27 October 2025)

Microsoft Releases Out-of-Band Security Update for Windows Server Update Service (WSUS)

CVE-2025-59287 is under active exploitation and could lead to unauthenticated remote code execution over a network

CC-4712 Medium

Published Wednesday 29 October 2025 (01:38) (updated 29 October 2025)

Apache Releases Security Updates

Proof-of-concept exploit code has been shared publicly for CVE-2025-55752, which could lead to RCE

CC-4666 Medium

Published Wednesday 11 June 2025 (01:29) (updated 21 October 2025)

Microsoft Releases June 2025 Security Updates

Scheduled updates for Microsoft products, including security updates for 66 vulnerabilities, of which 1 has been reported as actively exploited.