Product-News

Elastic has released a detection rule that utilizes LLM-based correlation to triage multiple endpoint security alerts on a single host into coherent attack chains.

CrowdStrike has introduced a native security integration with Anthropic’s Claude Cowork that deploys the Falcon Linux sensor inside agent virtual machines to mitigate supply chain and execution risks within isolated AI environments.

JetBrains has disclosed multiple security vulnerabilities affecting several development products, including CLion, Datalore, Hub, IntelliJ IDEA, Ktor, and YouTrack, requiring immediate attention and patching.

The Canadian Centre for Cyber Security has released an advisory regarding multiple unidentified vulnerabilities impacting a wide range of Red Hat enterprise software products.

Veeam has released security updates for multiple products, including Veeam Agent for Linux, Veeam Backup and Replication, Veeam Backup for Microsoft 365, and Veeam ONE, to address undisclosed vulnerabilities.

Multiple vulnerabilities affecting Mozilla Firefox, Firefox ESR, and Thunderbird have been disclosed, necessitating updates to the latest versions to mitigate potential security risks.

Fortinet has released security hardening updates for FortiAnalyzer, FortiAuthenticator, FortiMail, FortiManager, and FortiOS to address multiple vulnerabilities.

Atlassian has released security updates addressing multiple vulnerabilities across its Data Center and Server product portfolio, including Bamboo, Bitbucket, Confluence, Crowd, Fisheye/Crucible, Jira, and Jira Service Management.

Cisco has released a software hardening update to address eight vulnerabilities (CVE-2026-76490 through CVE-2026-76497) identified during an internal security review of the Expressway Core and Edge series.

Cisco has released patches for three critical vulnerabilities, tracked as CVE-2026-76498, CVE-2026-76499, and CVE-2026-76500, discovered during an internal security review of the Application Policy Infrastructure Controller.

Cisco has released critical security patches for Smart Software Manager On-Prem addressing four internally discovered vulnerabilities, including CVE-2026-76480, CVE-2026-76482, CVE-2026-76483, and CVE-2026-76484.

An authenticated, remote attacker can exploit a flaw in Grafana to perform unauthorized information disclosure due to improper access control.

Fleet is affected by multiple security vulnerabilities that allow unauthenticated or authenticated attackers to perform SQL injection, arbitrary code execution, and unauthorized data manipulation.

Grafana Labs has addressed a security vulnerability identified as CVE-2026-19516 affecting the Grafana MCP Server and mcp-grafana components in versions 1.0.0 and earlier.

CVE-2026-68204 is a vulnerability in the Linux vivid media driver where a lack of checks for vb2_is_busy() during capability toggling may result in memory instability or race conditions.

A NULL pointer dereference vulnerability exists in the MediaTek mt76 driver within the mt76_connac_mcu_uni_bss_he_tlv function, potentially leading to kernel panic or denial-of-service conditions.

A 32-bit integer overflow vulnerability in the AMD KFD kernel driver allows for potential memory corruption during CWSR size calculations.

CVE-2026-68123 is a vulnerability in Open vSwitch related to GSO userspace truncation that may cause an underflow condition during packet processing, potentially impacting memory or system stability.

CVE-2026-68331 identifies a resource management vulnerability in the dpaa2-eth driver related to improper handling of MAC endpoint devices during disconnection, which may lead to system instability.

The carl9170 Wi-Fi driver contains an out-of-bounds read vulnerability due to an off-by-two error in the TX status handler, potentially leading to memory disclosure or system instability.

CVE-2026-68256 describes a memory reference leak in the Linux kernel drm/amd/display driver occurring during specific DP alt mode timeout conditions.

A memory management flaw in the AMD display driver (drm/amd/display) for the Linux kernel allows for improper handling of DisplayPort Multi-Stream Transport (DP MST) configurations.

Intel has patched memory leaks and list corruption vulnerabilities in the stratix10-svc firmware component that could lead to system instability.

CVE-2026-68186 describes a vulnerability in the Linux kernel binfmt_misc module where the have_execfd flag is set prematurely, potentially enabling local privilege escalation.

HashiCorp has released security advisory HCSEC-2026-25 addressing multiple vulnerabilities in Consul Community Edition and Consul Enterprise that require immediate patching.

A NULL pointer dereference vulnerability in the Linux kernel's MPLS subsystem, specifically affecting configurations where CONFIG_INET is disabled, can lead to a denial-of-service condition.

An integer overflow vulnerability (CVE-2025-48595) in the Android Framework allows for local code execution, potentially leading to privilege escalation on affected Android devices by a locally present attacker.