Vendor Security Advisory
Oracle Java Security Alert Distrusts Compromised eMudhra Intermediates
Oracle's Java alert distrusts compromised eMudhra intermediates. Inventory listed runtimes, patch or mitigate, validate trust, and retain evidence.
Google Cloud GCP-2026-070 Warns of Critical PHP RCE Flaws
Google Cloud GCP-2026-070 flags two critical PHP RCE flaws. Inventory workloads, redeploy fixed runtimes, verify active revisions, and retain evidence.
GitLab Critical Patch Release Fixes CVSS 10 Server RCE
GitLab fixes a CVSS 10 server RCE and 11 other flaws. Upgrade supported branches, review detections and migrations, validate, and retain evidence.
AWS Serverless CI/CD Sample 1.0.11 Fixes Privilege Assignment Flaw
AWS fixed a privilege flaw in its serverless CI/CD sample 1.0.11. Inventory derived deployments, restrict push access, update, and retain evidence.
Google Chrome 156 Stable Updates Fix 353 Security Issues
Google Chrome 156 stable fixes 353 security issues on desktop and Android. Deploy the platform build, restart where required, and retain evidence.
AWS Kiro Crew 0.7.2 Fixes WhatsApp Cross-Session Authorization Flaw
AWS fixed a Kiro Crew WhatsApp authorization flaw in 0.7.2. Check non-default channel settings, update or disable the channel, and retain evidence.
Mozilla Updates Firefox and ESR for Certificate Blocklist and Component Flaws
Mozilla released Firefox 158.0.1 and ESR 153.5.1 and 115.43.1. Validate browser channels, deploy the supported build, and retain evidence.