Oracle Java Security Alert Distrusts Compromised eMudhra IntermediatesNew!!
Oracle's Java alert distrusts compromised eMudhra intermediates. Inventory listed runtimes, patch or mitigate, validate trust, and retain evidence.
Google Cloud GCP-2026-070 Warns of Critical PHP RCE FlawsNew!!
Google Cloud GCP-2026-070 flags two critical PHP RCE flaws. Inventory workloads, redeploy fixed runtimes, verify active revisions, and retain evidence.
AWS Serverless CI/CD Sample 1.0.11 Fixes Privilege Assignment FlawNew!!
AWS fixed a privilege flaw in its serverless CI/CD sample 1.0.11. Inventory derived deployments, restrict push access, update, and retain evidence.
Google Chrome 156 Stable Updates Fix 353 Security IssuesNew!!
Google Chrome 156 stable fixes 353 security issues on desktop and Android. Deploy the platform build, restart where required, and retain evidence.
AWS Kiro Crew 0.7.2 Fixes WhatsApp Cross-Session Authorization FlawNew!!
AWS fixed a Kiro Crew WhatsApp authorization flaw in 0.7.2. Check non-default channel settings, update or disable the channel, and retain evidence.
CISA Adds Exploited SiteGuard Server Edition Command Injection to KEVNew!!
CISA added exploited SiteGuard CVE-2026-106931 to KEV. Preserve diagnostics, apply the platform-specific update, investigate, and retain evidence.
CISA Adds Actively Exploited Plex Media Server Chain to KEVNew!!
CISA added four actively exploited Plex Media Server flaws to KEV. Update now, assess exposed servers for compromise, and retain evidence.
Mozilla Updates Firefox and ESR for Certificate Blocklist and Component FlawsNew!!
Mozilla released Firefox 158.0.1 and ESR 153.5.1 and 115.43.1. Validate browser channels, deploy the supported build, and retain evidence.