Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Critical vulnerability in certain Hikvision products, IP cameras Critical vulnerability in certain Hikvision products, IP cameras 22 Sep 2021 Alert Alert on a critical Hikvision vulnerability affecting products including IP cameras, allowing full device compromise; users should apply firmware updates immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in Open Management Infrastructure, affects certain Microsoft Azure services Remote code execution vulnerability present in Open Management Infrastructure, affects certain Microsoft Azure services 16 Sep 2021 Alert Alert on Fortinet vulnerability (CVE-2022-40684) that could enable authentication bypass and unauthorised access. Apply patches and follow Fortinet guidance immediately.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows Remote code execution vulnerability present in the Windows Scripting Engine of Microsoft Windows 16 Sep 2021 Alert Alert on a Microsoft Windows vulnerability that could allow arbitrary code execution and system takeover. Affected organisations should apply Microsoft security updates promptly.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Critical vulnerabilities present in certain versions of Apple iOS, macOS and Safari Critical vulnerabilities present in certain versions of Apple iOS, macOS and Safari 14 Sep 2021 Alert Alert on vulnerabilities in Apple iOS, macOS, and Safari that could allow attackers to install malware or take control of affected devices.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Remote code execution vulnerability present in the MSHTML component of Microsoft Windows Remote code execution vulnerability present in the MSHTML component of Microsoft Windows 08 Sep 2021 Alert Alert on a Microsoft Windows vulnerability that could allow arbitrary code execution and takeover of affected systems. No patch is available; apply Microsoft’s recommended workarounds.
Access publications and alerts / Alerts and advisories / Archived alerts and advisories / Suspected user credentials stolen from FortiNet devices leaked online Suspected user credentials stolen from FortiNet devices leaked online 10 Sep 2021 Alert A malicious cyber actor has leaked a list of suspected user credentials and IP address of the associated FortiNet SSL VPN device the credentials are used for. Organisations should review the patch status and history of internet exposed FortiNet SSL VPN devices and consider performing a password reset for affected users.
