Security Notices
CISA Adds Two Chained Ivanti Connect Secure Flaws to KEVNew!!
CISA adds two chained Ivanti Connect Secure flaws to KEV. Apply Ivanti guidance, triage exposed appliances, preserve evidence, and meet due dates.
AWS Nitro Enclaves SDK 0.4.6 Fixes Two Security IssuesNew!!
AWS Nitro Enclaves SDK 0.4.6 fixes enclave code execution and KMS impersonation risks. Upgrade, rebuild images, validate attestation, and retain evidence.
TeamViewer Says PHP2Shell Requires No Customer ActionNew!!
TeamViewer says PHP2Shell is not assigned to its products and requires no customer action. Document applicability, stay current, and retain evidence.
Johnson Controls Names Two Patched HTTP2Shell ProductsNew!!
Johnson Controls v2 names two patched Fire products for HTTP2Shell. Inventory versions, apply supported fixes, validate operations, and retain evidence.
Qt 6.8.10, 6.11.3, and 6.12.1 Fix CBOR Conversion FlawNew!!
Qt fixed crafted-CBOR conversion crashes and possible memory-safety impact in 6.8.10, 6.11.3, and 6.12.1. Rebuild apps, test, and retain evidence.
ClickHouse 26.10.3.7 Fixes Unauthenticated Server RCENew!!
ClickHouse fixed critical unauthenticated server RCE in supported 26.x streams. Inventory exposure, update exact branches, and retain evidence.
