Advisories from the SOC

Google has patched two Chrome flaws that can enable code execution outside the sandbox. Update affected desktop and iOS builds immediately.

Cisco has disclosed three critical vulnerabilities affecting selected Nexus 9000 Series Switches and all Cisco IOS XR Software releases. CVE-2026-20212 may allow unauthenticated remote code execution with root privileges, while the IOS XR hardening release addresses resource-control and access-control weaknesses with maximum CVSS scores of 9.8. Apply Cisco's fixed software and relevant SMUs as a priority.

HPE has fixed five critical Fabric Composer flaws enabling authentication bypass, code execution, administrative access and stored XSS.

Vivi has released Windows App version 3.12.1 to address an incorrectly scoped Windows Firewall rule in version 3.12.0. Secure-ISS recommends upgrading affected Intel and AMD Windows devices.

ServiceNow has fixed three critical, unauthenticated AI Platform flaws enabling code execution, privilege escalation and SQL injection.

Active exploitation affects all PaperCut NG/MF versions. Restrict internet access and apply emergency patches for v25 or v26 immediately.

Ubiquiti patches three CVSS 10.0 UniFi flaws enabling command injection and authentication bypass. Update affected systems immediately.

A fake verification prompt led to a confirmed compromise. Our SOC isolated the laptop and secured the account within 20 minutes.