Cloud & Orchestration
Google Cloud Discloses Fixed Compute Engine Authorization Flaw
Google Cloud disclosed a fixed Compute Engine authorization flaw. Confirm historical use, assess disk-data risk, document status, and retain evidence.
HashiCorp Consul 2.1.0 Fixes Five Authorization and Availability Flaws
HashiCorp Consul 2.1.0 fixes five security flaws. Match ACL and Kubernetes scope, upgrade supported branches, validate policy, and retain evidence.
AWS Directs Trust-Bundle Updates After eMudhra Key Compromise
AWS published eMudhra trust-bundle guidance. Update customer-managed components, track service rollouts, validate TLS dependencies, and retain evidence.
Google Cloud GCP-2026-071 Directs eMudhra CA Distrust Updates
Google Cloud GCP-2026-071 addresses compromised CA keys. Update customer-managed trust stores and gcloud, track managed rollout, and retain evidence.
AWS Remediates Athena Engine v3 Cross-Account Metadata Disclosure
AWS remediated Athena engine v3 metadata disclosure. Confirm historical use, review sensitive query text where warranted, and retain assessment evidence.
AWS Bulletin 2026-143 Addresses Critical PHP Runtime RCE
AWS bulletin 2026-143 covers two critical PHP RCE flaws. Inventory customer runtimes, deploy fixed versions, verify workers, and retain evidence.
Google Cloud GCP-2026-070 Warns of Critical PHP RCE Flaws
Google Cloud GCP-2026-070 flags two critical PHP RCE flaws. Inventory workloads, redeploy fixed runtimes, verify active revisions, and retain evidence.
OneUptime 14.0.69 Fixes Kubernetes AI Authorization Bypass
OneUptime 14.0.69 fixes Kubernetes AI authorization gaps. Inventory scoped users, upgrade, validate resource controls, and retain evidence.
AWS Updates Amazon Linux Hosts for KVM Virtio-Net Vulnerability
AWS released Amazon Linux kernels for a KVM virtio-net host flaw. Identify self-managed hypervisors, update and reboot hosts, and retain evidence.
AWS Amplify Updates Fix Cross-Owner GraphQL Record Access
AWS fixes cross-owner access in Amplify GraphQL resolvers. Upgrade affected packages, redeploy backends, validate authorization, and retain evidence.