Vendor Security Advisory
Google Cloud GCP-2026-071 Directs eMudhra CA Distrust Updates
Google Cloud GCP-2026-071 addresses compromised CA keys. Update customer-managed trust stores and gcloud, track managed rollout, and retain evidence.
Tenable Enclave Security Patch SC-202610.2 Updates PHP
Tenable released SC-202610.2 for Tenable Enclave Security. Apply the correct patch, verify PHP and service health, test operations, and retain evidence.
Tenable Security Center Patch SC-202610.2 Updates PHP
Tenable released SC-202610.2 for Tenable Security Center. Apply the correct patch, verify PHP and service health, test operations, and retain evidence.
AWS Strands Agents SDK Updates Isolate A2A Conversation State
AWS fixed A2A conversation-state isolation in Strands Agents SDKs. Upgrade Python and TypeScript packages, validate tenancy, and retain evidence.
AWS SAM CLI 1.166.2 Fixes Terraform Hook Command Injection
AWS SAM CLI 1.166.2 fixes Terraform hook command injection. Upgrade build hosts, audit untrusted inputs and forks, validate pipelines, and retain evidence.
AWS Remediates Athena Engine v3 Cross-Account Metadata Disclosure
AWS remediated Athena engine v3 metadata disclosure. Confirm historical use, review sensitive query text where warranted, and retain assessment evidence.
Synology SA-26:14 Fixes Critical PHP2Shell RCE in DSM Packages
Synology fixed critical PHP2Shell RCE in DSM packages. Update Calendar, Mail Station, and supported PHP branches; migrate PHP 7.3; retain evidence.
WatchGuard Revises FileVault Recovery-Key Fix to Agent 1.17.23
WatchGuard revised its FileVault recovery-key fix to Agent 1.17.23. Update affected Macs, assess key exposure, rotate as needed, and retain evidence.
WatchGuard Agent 1.25.14 Fixes Windows Log Directory Permissions
WatchGuard fixed Windows Agent log-directory permissions. Update to 1.25.14, verify access controls and logging, and retain endpoint evidence.