Wavenet will be implementing a number of Change Freezes to ensure stability across all networks and infrastructure. These periods are critical to maintain the reliability […]

Fortinet have released details surrounding a recently disclosed vulnerability affecting various FortiManager products. This has been given a “Critical” severity rating of 9.8/10.0 on the […]

Mitel has issued a critical vulnerability affecting their MiCollab and “MiVB SVI” products. Mitel Product Security Advisory   CVE ID   Security Impact Rating   […]

Mitel has become aware of two vulnerabilities affecting their MiCollab product. Both vulnerabilities have been given a ‘Critical’ severity rating. Mitel Product Security Advisory   […]

Cisco have recently released details of three vulnerabilities, two of which have been identified in active use within an ongoing exploitation campaign dubbed ArcaneDoor. The […]

Summary Malicious code was discovered in the upstream tarballs of xz, starting with version 5.6.0. Through a series of complex obfuscations, the liblzma build process […]

Summary “An attacker can manipulate file upload params to enable paths traversal and under some circumstances this can lead to uploading a malicious file which […]

Daisy will be implementing a number of Change Freezes to ensure stability across Daisy networks and infrastructure.

ServiceNow – Potential Public List Widget Misconfiguration   Daisy would like to reassure our customers and partners that we have carried out a thorough assessment […]

The TTB Call Recording products became End of Life on the 30 June 2023 and will have the access for stored call recordings turned off […]

Multiple memory corruption vulnerabilities in VMware vCenter Server were privately reported to VMware. The vCenter Server contains a heap overflow vulnerability due to the usage […]

The disclosed vulnerability has a critical CVSS score of 9.2 which affects FortiOS and FortiProxy components of Fortinet devices that are configured to use SSL. […]

Daisy is not directly impacted by the recently disclosed MOVEit incident which is currently prevalent in the news. Furthermore, Daisy has no known affected dependents, […]

PaperCut MF and PaperCut NG applications are affected by two recently disclosed vulnerabilities. The most serious of these (CVE-2023–27351) is rated as “Critical” severity with […]

National test of the UK Emergency Alerts Service On Sunday 23 April 2023, at 3pm, there will be a national test of the UK Emergency […]

Microsoft have recently addressed a critical security vulnerability in Microsoft Outlook for Windows which has been exploited in targeted attacks. As this vulnerability is easy […]

Daisy will be implementing a number of Change Freezes to ensure stability across Daisy networks and infrastructure.

As part of our drive to increase overall availability, Daisy will endeavour to align Major Changes that are expected to cause service impact to pre-scheduled […]

The OpenSSL 3.0.4 release introduced a serious bug in the RSA implementation for X86_64 CPUs supporting the AVX512IFMA instructions. This issue makes the RSA implementation […]

Response to CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server Daisy are responding to two zero-day vulnerabilities in on-premise Microsoft Exchange Servers. Exchange […]

Daisy’s statement on the possibility of power outages due to the Government implementing emergency measures. Daisy’s data centres are designed, operated and have strong business […]

MBORC (Matters beyond our reasonable control) declaration for repair services. This MBORC declaration notification is issued as a special message to all Openreach customers. As […]

Latest on pay review negotiations between BT / Openreach and the communication workers union (CWU) who represent BT and Openreach employees…

In early June Mitel released details of a vulnerability under security bulletin 22-0005-001.   This has been assigned CVE-2022-31784, with a critical rating of 9.8 […]

Brief On May 30th, 2022 Microsoft released guidance relating to a Zero-Day vulnerability which affects the Microsoft Support Diagnostic Tool (msdt) in Windows which allows […]

Please be advised the NCSC in conjunction with U.S., Australian, Canadian, and New Zealand cyber authorities have released a joint Cybersecurity Alert (CSA). This provides […]

Atlassian has released security fixes for multiple vulnerabilities Atlassian Jira software, Confluence Data Center, and Bitbucket Data Center 1, Atlassian Jira Software Atlassian has released […]

A report was made to VMWare recently, detailing an exploit in Spring MVC and Spring WebFlux application running on JDK 9+, dubbed “Spring4Shell”. These applications […]

Microsoft have recently released some detail surrounding a critical vulnerability assigned CVE-2022-26809. This is an unauthenticated remote code execution affecting Remote Procedure Call (RPC) protocol, […]

Google have recently addressed a security vulnerability in Chrome affecting the V8 JavaScript engine. Designated CVE-2022-1096, this vulnerability has been identified in ongoing attacks prior […]

Microsoft addressed a critical vulnerability within Microsoft Exchange Server as part of the March 2022 patch Tuesday release. CVE-2022-23277               Remote Code Execution                8.8/10.0 […]

In February Mitel disclosed product security advisory 22-0001, now assigned CVE-2022-26143. Stated to affect, Mitel MiCollab (Prior to and including R9.4SP1) and MiVoice Business Express […]

This MBORC declaration notification is issued as a special message to all Daisy customers due to the impact of Storm Eunice in the UK Due […]

Since notification of the LOG4J vulnerability, Daisy have worked around the clock, engaging stakeholders across our vast portfolio of products, and services under the coordination […]

What Microsoft’s New Commerce Experience Means For You Microsoft is enhancing its new commerce platform to simplify and streamline the customer experience and adapt to […]

Knowledge of a vulnerability in the longstanding, widely implemented java-based logging framework log4j has spread quickly throughout the internet. Included in many applications, multiple versions […]

Daisy, in conjunction with our suppliers, is working to reduce the number of inactive or no longer used non-geographic number services. In line with our […]

As part of our drive to increase overall availability, Daisy will endeavour to align Major Changes that are expected to cause service impact to pre-scheduled […]

An elevation of privilege vulnerability exists because of excessively permissive Access Control Lists (ACLs) on multiple system files, including the Security Accounts Manager (SAM) database. […]

PrintNightmare is a remote code execution vulnerability in the Windows Print Spooler service. A remote authenticated attacker could utilise PrintNightmare to escalate their privileges or […]

Vodafone has been made aware of a Flubot SMS scam. The SMS message is impersonating DHL across the Vodafone network and is affecting…

Microsoft addressed four critical vulnerabilities in Microsoft Exchange Server as part of the April 2021 patch Tuesday release. CVE-2021-28480               Remote Code Execution                9.8/10.0 […]

DCS Security Advisory – Microsoft Exchange Proxylogon Vulnerability   Following the Microsoft Security update (Multiple Security Updates Released for Exchange Server) and mitigations for those […]

DCS Security Advisory – Microsoft Windows TCP/IP Vulnerabilities February 2021   Februarys “Patch Tuesday” fixes multiple high severity vulnerabilities, of the 56 vulnerabilities patched 11 […]

DCS Security Advisory to its customers – DCS Is not impacted by the recent supply chain Trojan attack Sunburst which is exploiting the SolarWinds Orion […]

To protect our people and your customers our engineers will be following guidance to allow the safe provision or repair of services…

22 May 2020: Reference document to provide latest status and approach includes by product/journey. Transition to new normal guidance…risk and escalation processes…

Document Ref / Title: DCS-RA-COVID19(b) – Managing Health & Safety during COVID-19 pandemic Site / Location: Customer occupied areas within Business Continuity (BC) premises / […]

Document Ref / Title: DCS-RA-COVID-19(a) – Managing Health & Safety during COVID-19 pandemic Site / Location: All DCST sites / work areas Environment or Task […]

Further to our communication yesterday, we have been informed this morning that the Openreach Number Portability helpdesk has been closed.  This means that it will […]

Further to the Service updates issued on Friday 20th March where we advised that our contact routes would be shut on Sunday 22nd March due […]

Last night (Monday 23 March 2020) the UK Government announced strict new curbs on life in the UK to tackle the spread of coronavirus. People […]

This MBORC declaration notification is issued as a special message to all Openreach customers due to the impact of COVID-19 in the UK Due to […]

Daisy has received a notification (CVE-2020-8597) detailing a critical vulnerability within the Point-to-Point Protocol Daemon (pppd) through versions 2.4.2 – 2.4.8. This vulnerability may allow […]

In light of the current situation with the COVID-19 coronavirus, Daisy’s business continuity management consultancy team provides some high-level guidance for planning and response for […]

We would like to provide an update on HP’s efforts to address the supply chain challenges resulting from the Coronavirus outbreak.

Daisy has received a notification from Cisco detailing a number of vulnerabilities within their Cisco Discovery protocol (CDP). This series of vulnerabilities has been named […]

Daisy Corporate Services has a number of vendors with factories in Wuhan, China and we are aware that deliveries on some of our customer orders […]

Daisy has received a notification of a vulnerability (CVE-2020-0601) that affects a number of Windows versions . The flaw exists in Microsoft’s Crypto API (crypt32.dll) […]

Daisy have received an advisory relating to a critical vulnerability in the Citrix Application Delivery Controller (ADC) formerly known as NetScaler ADC and Citrix Gateway […]

Daisy have received an advisory relating to a number of critical vulnerabilities which are wormable in Microsoft’s Remote Desktop Services namely (CVE-2019-1181) and (CVE-2019-1182). These […]

Daisy has received notification from Intel disclosing a new set of speculative execution side channel vulnerabilities, collectively referred to as “Microarchitectural Data Sampling” (MDS). These […]

Daisy has received notification of a critical vulnerability affecting some versions of Windows with Remote Desktop Services implemented; Windows Remote Desktop Services RCE Vulnerability (CVE-2019-0708). […]