Security Notices
GitLab Critical Patch Release Fixes CVSS 10 Server RCE
GitLab fixes a CVSS 10 server RCE and 11 other flaws. Upgrade supported branches, review detections and migrations, validate, and retain evidence.
AWS Serverless CI/CD Sample 1.0.11 Fixes Privilege Assignment Flaw
AWS fixed a privilege flaw in its serverless CI/CD sample 1.0.11. Inventory derived deployments, restrict push access, update, and retain evidence.
Google Chrome 156 Stable Updates Fix 353 Security Issues
Google Chrome 156 stable fixes 353 security issues on desktop and Android. Deploy the platform build, restart where required, and retain evidence.
AWS Kiro Crew 0.7.2 Fixes WhatsApp Cross-Session Authorization Flaw
AWS fixed a Kiro Crew WhatsApp authorization flaw in 0.7.2. Check non-default channel settings, update or disable the channel, and retain evidence.
CISA Adds Actively Exploited Plex Media Server Chain to KEV
CISA added four actively exploited Plex Media Server flaws to KEV. Update now, assess exposed servers for compromise, and retain evidence.
CISA Adds Exploited SiteGuard Server Edition Command Injection to KEV
CISA added exploited SiteGuard CVE-2026-106931 to KEV. Preserve diagnostics, apply the platform-specific update, investigate, and retain evidence.
Mozilla Updates Firefox and ESR for Certificate Blocklist and Component Flaws
Mozilla released Firefox 158.0.1 and ESR 153.5.1 and 115.43.1. Validate browser channels, deploy the supported build, and retain evidence.