Chrome Fixes 21 Flaws. Check the Running Build.
Chrome’s 29 October release includes a critical MediaStream flaw. Check the platform target, channel and version actually in use.
Exploited Cisco VPN Flaw Can Reload ASA and FTD Firewalls
Cisco reports exploitation of an ASA and FTD SSL VPN flaw. Check secondary-authentication groups and match the firewall to an appropriate fixed release.
AI Act, DORA and CRA: What Changed in 2026, What Comes in 2027
New AI deadlines, live product reporting and operational guidance reshape the work organisations need to finish before 2027.
Magento Loader Changes Expose Retained Access
Investigate retained access.
Exploited ESX Flaw Can Hide Privileged Activity
Some privileged actions can escape the audit trail.
UpdraftCentral Revocation Still Needs a Local Check
Verify keys and earlier intrusion.
Arista VCO Attacks Call for Investigation
Upgrade and investigate.
Brotli Attacks Raise the Stakes for Node.js
Check untrusted input and the runtime processing it. Available upstream fixes do not settle every product’s package status.
October Node.js Fixes Reach Beyond Brotli
Ten flaws, three security releases and the checks that show whether an application is running a corrected build.
Palo Alto Confirms PHP2Shell Attacks as Patch Routes Expand
Palo Alto Networks has corroborated PHP2Shell attacks on PAN-OS. Match the right appliance fix, preserve evidence and keep WordPress observations in scope.
Commvault CVFS Needs Its Own Update Receipt
A completed task is not an accepted result. Give the receiving owner something concrete to verify.
Juniper’s Critical Patch
A runbook that separates the planned image from the service that is actually running.