Traefik’s ForwardAuth Pool Can Carry Another User’s Identity
The October correction isolates authentication-service connections. Earlier backend fixes do not settle this separate NTLM and Negotiate exposure.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
Juniper’s SSR Fixes Depend on the Device’s Management State
Juniper’s disclosed SSR and Conductor fixes cover 18 flaws. Onboarding, local access and the controller’s upgrade route change the response for individual devices.
LiteLLM’s New Signing Key Does Not Clean Old Deployments
LiteLLM’s 30 October signing-key update changes artifact verification. Recovery still needs separate checks of affected environments, credentials and sessions.
Moodle 5.3 LTS Is Current: Check Your Upgrade Stack
Moodle 5.3 LTS has the longest current security window. Check PHP, databases, plugins, the web root and course content before upgrading.
EU Court: Gross Negligence Does Not Delay an Unauthorised Refund
A payment provider must separate the initial refund from any later liability claim. The CJEU ruling preserves conditions, evidence burdens and limits.
Check Webex SIP Certificates Before 2 November
Cisco plans a staged Webex Meetings trust change from 2 November. Check affected customer-managed SIP certificate chains and validate meeting and failover paths.
Cursor Warns of Tampered Claude Code Extensions in Two Versions
Cursor’s updated notice names Claude Code extension versions 2.1.312 and 2.1.313. Check the distribution source, persistence and host recovery.
Firefox 159 and ESR Updates Fix Sandbox and Memory Safety Issues
Mozilla’s October updates cover Firefox 159 and two ESR branches. Check overlapping fix lists, platform support and the version running after relaunch.
Chrome Fixes 21 Flaws. Check the Running Build.
Chrome’s 29 October release includes a critical MediaStream flaw. Check the platform target, channel and version actually in use.
Exploited Cisco VPN Flaw Can Reload ASA and FTD Firewalls
Cisco reports exploitation of an ASA and FTD SSL VPN flaw. Check secondary-authentication groups and match the firewall to an appropriate fixed release.