Cybersecurity briefings
A minimal stream of relevant cybersecurity stories, selected for clarity and speed.
Three CPU side-channel flaws in AMD Turin chips affect Google Cloud VMs. Mitigations protect VM-to-VM and VM-to-host; guest OS patch required to prevent intra-process data inference.
PTC released patches for critical RCE vulnerability (CVSS 9.2) in Windchill and FlexPLM due to improper input validation and deserialization of untrusted data.
Mass GitHub account compromise used to inject secret stealer malware into CI/CD pipelines across 1,806+ repositories, stealing API keys and cloud credentials.
mod_http2 vulnerability (CVSS critical) in Apache HTTP Server 2.4.55–2.4.70 allows unauthenticated RCE on servers with HTTP/2 enabled; fixed in 2.4.71.
CISA confirms active exploitation of CVE-2026-20320 (Cisco BroadWorks, CVSS 7.5) and related telecom flaws in known exploited vulnerabilities catalog.