Vendor Security Advisory
ChromeOS 16836.32.0 Fixes Ten Browser VulnerabilitiesNew!!
Google updates ChromeOS and ChromeOS Flex with ten browser fixes. Verify device eligibility, OS and browser builds, managed apps, and restart completion.
AWS Expands Babelfish Privilege-Escalation RemediationNew!!
AWS expands Babelfish patch mappings for a privilege-escalation flaw. Upgrade the extension or Aurora engine branch and verify database permissions.
AWS SDK for pandas 3.17.1 Fixes Iceberg SQL Identifier InjectionNew!!
AWS fixes Iceberg SQL identifier injection in awswrangler 3.17.1. Upgrade workloads, review Glue metadata permissions, and validate privileged writes.
Fortinet Adds Virtual Patch Guidance for Linux TCP VulnerabilityNew!!
Fortinet adds virtual-patch guidance for CVE-2026-98432. Verify FMWP database 26.113 and applicable protection while product investigations continue.
MediaTek November Bulletin Covers Modem and Chipset VulnerabilitiesNew!!
MediaTek lists modem and chipset flaws in its November bulletin. Map device firmware to affected chipsets, obtain OEM fixes, and retain update evidence.
AWS Kinesis Producer Library 1.0.8 Fixes Credential Exposure
AWS Kinesis Producer Library 1.0.8 fixes credential exposure. Upgrade producers, rotate exposed credentials, restrict logs, validate, and retain evidence.
Delinea Secret Server 12.3.1 Fixes Three Access Flaws
Delinea Secret Server 12.3.1 fixes FIDO2 validation, partial login bypass and unsigned JWT flaws. Upgrade, validate access, and retain evidence.
JetBrains Updates Address Compromised Certificate Trust
JetBrains updates address compromised certificate trust in IDEs, Toolbox, JCEF and jetbrainsd. Patch each layer, validate trust, and retain evidence.