Security Notices
Palo Alto Adds Prisma Cloud and SCM to Brotli Remediation
Palo Alto adds Prisma Cloud and SCM to remediated Brotli services. Recheck PAN-OS scope, patch client software, validate controls, and retain evidence.
Docker Updates Sandbox Trust Stores After eMudhra CA Compromise
Docker rebuilt Sandbox templates after the eMudhra CA compromise. Refresh images or trust stores, restart applications, validate, and retain evidence.
Node.js Security Releases Fix Ten Runtime Vulnerabilities
Node.js 22.23.4, 24.22.1, and 26.12.1 fix ten vulnerabilities. Update supported lines, rebuild derived artifacts, validate, and retain evidence.
Ubuntu USN-8946-1 Fixes Unbound DNS Vulnerabilities
Ubuntu USN-8946-1 fixes ten Unbound issues, including denial of service and cache poisoning. Update matching packages, validate DNS, and retain evidence.
Google Cloud GCP-2026-070 Warns of Critical PHP RCE Flaws
Google Cloud GCP-2026-070 flags two critical PHP RCE flaws. Inventory workloads, redeploy fixed runtimes, verify active revisions, and retain evidence.
GitLab Critical Patch Release Fixes CVSS 10 Server RCE
GitLab fixes a CVSS 10 server RCE and 11 other flaws. Upgrade supported branches, review detections and migrations, validate, and retain evidence.
Oracle Java Security Alert Distrusts Compromised eMudhra Intermediates
Oracle's Java alert distrusts compromised eMudhra intermediates. Inventory listed runtimes, patch or mitigate, validate trust, and retain evidence.