Proxmox Mail Gateway 9.1: Upgrade and Install Checklist
Upgrade Proxmox Mail Gateway 9.1 with mail flow, queue, quarantine, TLS, DNS, backup, and rollback checks.
Learn MoreColumn 1
Category: Web Hosting Security
Velvet Ant Linux Login Backdoors: Check PAM and OpenSSH
Sygnia says Velvet Ant replaced Linux PAM and OpenSSH components in a long-running intrusion. Hosting admins should verify login-stack integrity before rotating credentials.
Learn More
Arch AUR Atomic Arch: Check Recent AUR Builds Now
Arch AUR users should review recent AUR builds after the Atomic Arch campaign hijacked orphaned packages to deliver credential-stealing malware.
Learn More
LangGraph Security Updates: Patch Self-Hosted AI Agents
Patch self-hosted LangGraph deployments for SQLite, msgpack, and Redis checkpointer flaws, then review checkpoint stores, secrets, network access, and AI workflows.
Learn More
phpBB Auth Bypass: Update Forums to 3.3.17 Now
Update phpBB forums to 3.3.17 after a critical authentication bypass report, then test login, OAuth, admin access, backups, and forum moderation workflows.
Learn More
Palo Alto CVE-2026-0274: Update Cortex XSOAR/XSIAM Integration
Update the Palo Alto Networks CommvaultSecurityIQ Marketplace integration for Cortex XSOAR and Cortex XSIAM to 1.2.0 or later for CVE-2026-0274.
Learn More
Splunk CVE-2026-20253: CISA KEV Patch Guide
CISA added Splunk Enterprise CVE-2026-20253 to KEV on June 18. Upgrade self-managed Enterprise to 10.2.4, 10.0.7, 10.4.0, or later and verify clusters.
Learn More
Oracle PeopleSoft CVE-2026-35273: Apply Emergency Mitigations
CISA KEV now lists Oracle PeopleSoft CVE-2026-35273. Apply Oracle mitigation guidance, restrict HTTP exposure, review logs, and plan patch work.
Learn More
Langflow CVE-2026-5027: Patch Exposed AI App Servers
Update Langflow after CVE-2026-5027, rebuild deployed containers, restrict exposed AI app servers, and review files, logs, secrets, and workflow access.
Learn More
Ivanti Sentry CVE-2026-10520 and CVE-2026-10523: Patch, Restrict, and Check WAF Coverage
Patch Ivanti Sentry CVE-2026-10520 and CVE-2026-10523, restrict appliance exposure, review admin activity, and use WAF coverage only as temporary mitigation.
Learn More