Security Notices
Tenable Security Center Patch SC-202610.2 Updates PHP
Tenable released SC-202610.2 for Tenable Security Center. Apply the correct patch, verify PHP and service health, test operations, and retain evidence.
AWS Strands Agents SDK Updates Isolate A2A Conversation State
AWS fixed A2A conversation-state isolation in Strands Agents SDKs. Upgrade Python and TypeScript packages, validate tenancy, and retain evidence.
AWS SAM CLI 1.166.2 Fixes Terraform Hook Command Injection
AWS SAM CLI 1.166.2 fixes Terraform hook command injection. Upgrade build hosts, audit untrusted inputs and forks, validate pipelines, and retain evidence.
AWS Remediates Athena Engine v3 Cross-Account Metadata Disclosure
AWS remediated Athena engine v3 metadata disclosure. Confirm historical use, review sensitive query text where warranted, and retain assessment evidence.
Ubuntu USN-8952-1 Fixes Tornado Request-Handling Flaws
Ubuntu USN-8952-1 fixes Tornado request-handling flaws. Update release-specific packages, restart dependent services, test web paths, and retain evidence.
Synology SA-26:14 Fixes Critical PHP2Shell RCE in DSM Packages
Synology fixed critical PHP2Shell RCE in DSM packages. Update Calendar, Mail Station, and supported PHP branches; migrate PHP 7.3; retain evidence.
Tenable Security Center Patch SC-202610.1 Updates PHP
Tenable released SC-202610.1 for Tenable Security Center. Apply the patch, verify PHP and service health, test operations, and retain evidence.
WatchGuard Revises FileVault Recovery-Key Fix to Agent 1.17.23
WatchGuard revised its FileVault recovery-key fix to Agent 1.17.23. Update affected Macs, assess key exposure, rotate as needed, and retain evidence.