Vendor Security Advisory

Security Notices
Okta Access Gateway 2026.10.2 Fixes Admin Console Command Execution

Okta Access Gateway 2026.10.2 fixes authenticated Admin Console command execution. Upgrade appliances, review administrator activity, and retain evidence.

Read this guide
Security Notices
Okta Access Gateway 2026.44.0 Updates PHP for Two RCE Flaws

Okta Access Gateway 2026.44.0 updates PHP for two RCE flaws. Upgrade appliances, verify gateway configuration and exposure, and retain evidence.

Read this guide
Security Notices
Tenable Enclave Security Patch SC-202610.1 Updates PHP

Tenable released SC-202610.1 for Tenable Enclave Security. Apply the patch, verify PHP and service health, test operations, and retain evidence.

Read this guide
Security Notices
Tenable Security Center Patch SC-202610.1 Updates PHP

Tenable released SC-202610.1 for Tenable Security Center. Apply the patch, verify PHP and service health, test operations, and retain evidence.

Read this guide
Security Notices
WatchGuard Revises FileVault Recovery-Key Fix to Agent 1.17.23

WatchGuard revised its FileVault recovery-key fix to Agent 1.17.23. Update affected Macs, assess key exposure, rotate as needed, and retain evidence.

Read this guide
Security Notices
AWS Bulletin 2026-143 Addresses Critical PHP Runtime RCE

AWS bulletin 2026-143 covers two critical PHP RCE flaws. Inventory customer runtimes, deploy fixed versions, verify workers, and retain evidence.

Read this guide
Security Notices
AWS Fixes SageMaker SDK Default-Bucket Ownership Flaw

AWS fixed SageMaker SDK default-bucket ownership checks. Upgrade v2 and v3, verify S3 ownership, validate jobs, and retain IAM evidence.

Read this guide
Security Notices
Palo Alto Adds Prisma Cloud and SCM to Brotli Remediation

Palo Alto adds Prisma Cloud and SCM to remediated Brotli services. Recheck PAN-OS scope, patch client software, validate controls, and retain evidence.

Read this guide
Security Notices
Docker Updates Sandbox Trust Stores After eMudhra CA Compromise

Docker rebuilt Sandbox templates after the eMudhra CA compromise. Refresh images or trust stores, restart applications, validate, and retain evidence.

Read this guide
Security Notices
Node.js Security Releases Fix Ten Runtime Vulnerabilities

Node.js 22.23.4, 24.22.1, and 26.12.1 fix ten vulnerabilities. Update supported lines, rebuild derived artifacts, validate, and retain evidence.

Read this guide