Security Notices
Palo Alto Revises Three PAN-OS Advisories With Available Fixes

Palo Alto revised three PAN-OS advisories after fixed builds became available. Map each product and branch, update, validate, and retain evidence.

Read this guide
Security Notices
Palo Alto PAN-OS Management RCE Is Listed as Attacked

Palo Alto confirms limited CVE-2026-0322 exploitation and lists three associated IPs. Patch PAN-OS, investigate management access, and retain evidence.

Read this guide
Security Notices
Cisco Secure Email Gateway File-Write Flaw Is Actively Exploited

Cisco reports active exploitation of a Critical Secure Email Gateway file-write flaw. Update AsyncOS or Content Scanner Tools and preserve forensics.

Read this guide
Security Notices
CERT/CC Coordinates Name-Constraint Differences Across TLS Libraries

CERT/CC details Name Constraints differences across TLS libraries. Map validation paths, apply project fixes, test authorization, and retain evidence.

Read this guide
Security Notices
CERT/CC Details BoringSSL Name-Constraint Validation Differences

CERT/CC documents five BoringSSL Name Constraints findings with mixed status. Confirm the validation path, apply available updates, and retain evidence.

Read this guide
Security Notices
CERT/CC Warns of Three Bisheng Authorization Vulnerabilities

CERT/CC documents three Bisheng authorization flaws, including an unpatched legacy SSO bypass. Upgrade fixed paths, restrict SSO, and retain evidence.

Read this guide
Security Notices
CISA KEV Adds Two Chained AhsayCBS Vulnerabilities

CISA added two chained AhsayCBS flaws to KEV. Apply Ahsay's replacement hotfix for the installed branch, reboot, validate, and retain evidence.

Read this guide
Security Notices
Chrome Stable and Extended Stable Updates Fix Critical Flaws

Chrome Stable and Extended Stable updates fix Critical flaws. Confirm managed-browser versions, complete rollout, validate, and retain evidence.

Read this guide
Security Notices
Rockwell ArmorBlock 3.013 Fixes Authentication Bypass and DoS

Rockwell ArmorBlock 3.013 fixes authentication bypass and network-storm DoS. Match catalog numbers, update under OT controls, and retain evidence.

Read this guide
Security Notices
CERT/CC Warns of Cross-Tenant Lowcoder Query Access

CERT/CC documents cross-tenant Lowcoder Query Library access without an official fix. Restrict endpoints and roles, isolate tenants, and retain evidence.

Read this guide