Vendor Security Advisory

Security Notices
AWS Nitro Enclaves SDK 0.4.6 Fixes Two Security Issues

AWS Nitro Enclaves SDK 0.4.6 fixes enclave code execution and KMS impersonation risks. Upgrade, rebuild images, validate attestation, and retain evidence.

Read this guide
Security Notices
TeamViewer Says PHP2Shell Requires No Customer Action

TeamViewer says PHP2Shell is not assigned to its products and requires no customer action. Document applicability, stay current, and retain evidence.

Read this guide
Security Notices
Johnson Controls Names Two Patched HTTP2Shell Products

Johnson Controls v2 names two patched Fire products for HTTP2Shell. Inventory versions, apply supported fixes, validate operations, and retain evidence.

Read this guide
Security Notices
ClickHouse 26.10.3.7 Fixes Unauthenticated Server RCE

ClickHouse fixed critical unauthenticated server RCE in supported 26.x streams. Inventory exposure, update exact branches, and retain evidence.

Read this guide
Security Notices
Tenable Identity Exposure Updates Fix Three Vulnerabilities

Tenable Identity Exposure 3.93.6 and 3.77.18 fix three flaws, including critical command injection. Update, validate, review access, and retain evidence.

Read this guide
Security Notices
ABB Investigates PHP2Shell in Netcontrol and NAM Products

ABB is investigating Netcontrol and NAM PHP2Shell exposure without a fix. Restrict or disable web management, isolate assets, and retain evidence.

Read this guide
Security Notices
ABB Warns Obsolete ARM600 and Arctic Gateways Face PHP2Shell

ABB says obsolete ARM600 and Arctic gateways face PHP2Shell without a fix. Isolate or replace them, monitor exposure, and retain evidence.

Read this guide
Security Notices
Chrome 156.0.8078.79/.80 Fixes 21 Security Flaws

Chrome 156.0.8078.79/.80 fixes 21 security flaws on desktop and Android. Update managed browsers, restart sessions, validate policy, and retain evidence.

Read this guide
Security Notices
HashiCorp Boundary Updates Fix Vault Credential-Store SSRF

HashiCorp Boundary 1.0.2 and 0.21.6 fix Vault credential-store SSRF. Inventory controllers and permissions, update, validate, and retain evidence.

Read this guide
Security Notices
HashiCorp Nomad 2.1.0 Fixes Namespace and Symlink Flaws

HashiCorp Nomad updates fix namespace disclosure and host symlink attacks. Match permissions and features, update supported branches, and retain evidence.

Read this guide