Security Notices
TeamViewer Updates Remote Management Add-ons for Six Privilege FlawsNew!!
TeamViewer fixed six Remote Management privilege flaws. Verify client and add-on versions, confirm auto-updates, test services, and retain evidence.
Veeam Backup for Microsoft 365 8.6 Patch 1 Fixes Four FlawsNew!!
Veeam Backup for Microsoft 365 8.6 Patch 1 fixes four flaws. Upgrade through both fix boundaries, validate tenancy and REST access, and retain evidence.
Veeam Backup & Replication Updates Fix Four Security FlawsNew!!
Veeam Backup & Replication updates fix four flaws. Match product branches, install supported builds, validate backup services, and retain evidence.
Veeam ONE 13.1 Patch 1 Fixes MFA Bypass by AdministratorsNew!!
Veeam ONE 13.1 Patch 1 fixes an administrator MFA bypass. Upgrade affected servers, review privileged changes, validate MFA, and retain evidence.
Google Cloud Discloses Fixed Compute Engine Authorization FlawNew!!
Google Cloud disclosed a fixed Compute Engine authorization flaw. Confirm historical use, assess disk-data risk, document status, and retain evidence.
HashiCorp Consul 2.1.0 Fixes Five Authorization and Availability FlawsNew!!
HashiCorp Consul 2.1.0 fixes five security flaws. Match ACL and Kubernetes scope, upgrade supported branches, validate policy, and retain evidence.
AWS CDK 2.274.0 Fixes Redshift Custom-Resource SQL InjectionNew!!
AWS CDK 2.274.0 fixes Redshift custom-resource SQL injection. Upgrade packages, review PUBLIC grants, validate deployments, and retain evidence.
AWS Directs Trust-Bundle Updates After eMudhra Key Compromise
AWS published eMudhra trust-bundle guidance. Update customer-managed components, track service rollouts, validate TLS dependencies, and retain evidence.
Postiz 2.25.3 Fixes File Read and Token Forgery Flaws
Postiz 2.25.3 fixes arbitrary file read and token forgery. Upgrade promptly, preserve relevant evidence, validate access, and retain change proof.
HCL BigFix Updates CA Bundle After Certificate Compromise
HCL BigFix requires a current CA bundle after certificate compromise. Deploy BES Support v1520, validate downloads and TLS, and retain evidence.