Security Notices
Octopus Server Updates Restrict LDAP Directory SearchesNew!!
Octopus Server updates restrict LDAP directory searches. Confirm LDAP use, update affected servers, validate authentication, and retain evidence.
Canva Ortto WordPress Plugin 1.0.25 Fixes Three FlawsNew!!
Ortto WordPress plugin 1.0.25 fixes configuration overwrite, private product-data disclosure, and XSS. Update, inspect settings, and retain evidence.
ABB Warns ASPECT 3.09 and Earlier Are Exposed to PHP2ShellNew!!
ABB says ASPECT 3.09 and earlier face PHP2Shell RCE without a complete fix. Remove internet exposure, isolate, monitor, and retain evidence.
pgAdmin 4 9.19 Fixes 15 Security VulnerabilitiesNew!!
pgAdmin 4 9.19 fixes 15 flaws, including critical query-export command injection. Upgrade, review server-mode changes, validate, and retain evidence.
Apple Xcode 27.2 Fixes File and Sensitive-Data AccessNew!!
Apple Xcode 27.2 fixes arbitrary-file and sensitive-data access. Inventory developer Macs and build hosts, update, validate tooling, and retain evidence.
Rancher 2.15.3 and Maintained Branches Fix Five FlawsNew!!
Rancher releases fix five proxy, shell, and Fleet authorization flaws. Match branch and component, update, validate clusters, and retain evidence.
AWS Publishes Brotli CVE-2026-111497 Mitigation StatusNew!!
AWS published Brotli mitigation status. Match runtimes and images, rebuild or redeploy patched artifacts, validate workloads, and retain evidence.
Mattermost Updates Fix Agents Plugin Replacement FlawNew!!
Mattermost updates fix an Agents plugin path traversal leading to plugin replacement and code execution. Update, validate, and retain evidence.
Strands Agents Tools 0.8.6 Fixes Secret-Masking BypassNew!!
Strands Agents Tools 0.8.6 fixes a secret-masking bypass. Upgrade, find loaded environment tools, rotate credentials, and retain evidence.