News

• Posted January 11, 2024
• Technical Advisories
• Cyber Security Alerts

This Cyber Security Alert concerns two zero-day CVEs affecting Ivanti Connect Secure. The NCSC is aware of public reporting of the active exploitation in the wild from early December 2023.

• Posted December 15, 2023
• Technical Advisories
• Cyber Security Alerts

This Cyber Security Alert concerns a CVE affecting Apache Struts 2. The NCSC is aware of public reporting of the active exploitation and a proof of concept.

• Posted November 28, 2023
• Technical Advisories
• Cyber Security Alerts

This Cyber Security Alert concerns three high-severity CVEs affecting ownCloud, an open-source software product for sharing and syncing of files in distributed and federated enterprise scenarios.