CVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS #patchmanagement
@eyalestrin.bsky.social
@eyalestrin.bsky.socialCVE-2026-105811 - Authorization bypass through a user-controlled key in the Amazon Q Business Lambda hook sample in QnABot on AWS #patchmanagement
@eyalestrin.bsky.socialCVE-2026-105812 and CVE-2026-106032: Issue with Bedrock AgentCore Starter Toolkit - Import Agent Code Injection and SSRF #patchmanagement
@eyalestrin.bsky.socialCVE-2026-107352 - Missing authorization checks in Amazon Athena engine version 3 request handling #patchmanagement
@sempf.infosec.exchange.ap.brid.gyYeah, it's basically an op ed piece, but I smell what he's cookin.
https://decipher.sc/2026/10/07/patching-faster-has-never-been-the-answer/
@shringtech.bsky.socialWindows 11's latest Patch Tuesday update lands on October 13, and these are the biggest changes coming to your PC — Microsoft's October update for Windows 11 adds useful new features, including maximized apps, better File Explorer, WinRE Wi-Fi, and Copilot key options. #Windows #PatchManagement…
@eyalestrin.bsky.socialCheck your X.Org server version because a dozen vulnerabilities have been patched #patchmanagement
@eyalestrin.bsky.socialIBM and Red Hat patch 400-plus unknown Java flaws, open Clearinghouse for fix requests #patchmanagement
@eyalestrin.bsky.socialOpenSSH 10.6 enables a post-quantum signature algorithm, so experimental keys need replacing #patchmanagement
@eyalestrin.bsky.socialDebian's latest kernel security update has 1,313 reasons to patch #patchmanagement
@cyfar.ca~Projectzero~
Vendors should prepare rapid remediation using feature flags, filtering, alternate channels and hotpatching.
-
IOCs: (None identified)
-
#PatchManagement #ThreatIntel
@eyalestrin.bsky.socialAtlassian warns of critical file access flaw in its datacenter products (CVE-2026-21589) #patchmanagement
@mjetechnologies.comA contractor's missed security patch at a third-party vendor let hackers breach the FBI and expose employee data — and cost that contractor their job. Patch management isn't IT trivia; it's business risk. #MJE #Cybersecurity #PatchManagement #VendorRisk #DataBreach
@thedailytechfeed.comFBI removes Accenture contractor after patch failure opened PeopleSoft to ShinyHunters breach. #Oracle #PeopleSoft #ShinyHunters #Cybersecurity #PatchManagement #DataBreach https://thedailytechfeed.com/fbi-removes-accenture-contractor-over-oracle-patch-failure-after-shinyhunters-breach/
@eyalestrin.bsky.socialDSA-2026-324: Security update for Dell System Update (DSU) Vulnerabilities #patchmanagement
@psoheil.bsky.social🚨 Microsoft released out-of-band security update for high-severity Exchange Server vulnerability, CVE-2026-96940, rated 8.8 CVSS.
#Cybersecurity #MicrosoftExchange #Vulnerability #InfoSec #EmailSecurity #CloudSecurity #PatchManagement #ZeroTrust #CyberThreats
@technijian.bsky.socialEndpoint Central Agent Settings & Vulnerability Synchronization
Learn how structured Endpoint Central configuration can help organizations manage agent polling, vulnerability synchronization and patch deployment.
#EndpointCentral #PatchManagement #EndpointSecurity #Cybersecurity #Technijian
@securityonline.bsky.socialWeekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.
#WeeklyCVEReport #ExploitedVulnerabilities #CISAKEV #ZeroDay #PatchManagement #Cisco #FortiMail #VulnerabilityManagement
@eyalestrin.bsky.socialDSA-2026-448: Security Update for Dell Container Storage Modules Multiple Vulnerabilities #patchmanagement
@eyalestrin.bsky.socialCritical FortiMail zero-day exploited in the wild (CVE-2026-104286) #patchmanagement
@eyalestrin.bsky.socialOn-premises Exchange administrators must install V2 security updates to fix elevation flaws (CVE-2026-96940) #patchmanagement