Virtru / 27/10/2026 08:09:35 HKT
Virtru Data Security Platform × Pexip Secure Meetings
Virtru and Pexip announced a joint solution on 26 October 2026, extending attribute-based access control (ABAC) to scheduling and joining classified video conferences. According to the vendors, Pexip's policy enforcement point obtains a fresh policy decision from the Virtru Data Security Platform when a meeting is created and when participants join. It records authorisation, participant verification, meeting attributes and timing information. The capability is available to eligible defence, intelligence, federal civilian and allied organisations.
Anti-Ransomware analysis
Anti-Ransomware analysis: continuously rechecking participation eligibility can reduce the risk of static invitation links remaining usable after permissions change, while audit logs can support investigations. These are claims about a joint vendor solution, however. They do not replace identity-provider hardening, MFA, least privilege, meeting endpoint protection or policies for backing up and retaining recordings. Validate the actual integration scope and failure modes before deployment.
Amazon Web Services / 27/10/2026 08:09:35 HKT
AWS CDK @aws-cdk/aws-redshift-alpha
AWS disclosed CVE-2026-115418 on 26 October 2026. The issue affects the experimental @aws-cdk/aws-redshift-alpha module in AWS CDK. If an attacker can influence the username, comment or password in construct properties, crafted content could alter SQL executed with Amazon Redshift superuser privileges during deployment. Versions before 2.274.0-alpha.0 are affected. AWS fixed the issue in 2.274.0 and recommends reviewing existing table permissions granted to PUBLIC after upgrading.
Anti-Ransomware analysis
Anti-Ransomware analysis: this is not a vulnerability that can generally be exploited directly over the internet; an attacker must be able to influence CDK application construct property values. However, compromised CI/CD, template inputs or secret management processes could let deployment privileges amplify the impact. Upgrade the module, accept property values only from trusted developers and review Redshift PUBLIC grants. The advisory does not establish that any customer has been compromised or guarantee the product's overall security.
Sweet Security / 26/10/2026 08:11:32 HKT
Virtual Patching
Sweet Security released its Virtual Patching feature on 19 October 2026. According to the vendor, security teams can deploy protection policies from a vulnerability catalogue to running cloud and AI workloads, blocking requests targeting specific vulnerabilities until permanent patches are in place. Policies can persist as workloads scale or restart and can be removed after permanent patching.
Anti-Ransomware analysis
Anti-Ransomware analysis: virtual patching can shorten the exposure window between vulnerability discovery and a permanent update. It remains a compensating control and does not replace code patches, compatibility testing, least privilege, network segmentation or verifiable backups. The vendor's blocking capabilities are product claims. Test false positives, coverage and bypass risks on your own workloads first.
Amazon Web Services / 26/10/2026 08:11:32 HKT
Amazon Web Services Multi Model Server (MMS)
On 23 October 2026, AWS disclosed CVE-2026-115812 and CVE-2026-115813, concerning model archive extraction paths and model download paths. All released versions (1.1.11 or earlier) are affected. MMS is no longer maintained, and no patch is available. AWS recommends discontinuing use and migrating to a supported model-serving solution.
Anti-Ransomware analysis
Anti-Ransomware analysis: writing files outside intended directories or sending requests to unintended network destinations could provide routes to malware execution, lateral movement or internal services. If MMS is still in use, restrict administration interfaces to trusted sources, prevent externally supplied download URLs and prioritise migration. These are risk mitigation recommendations, not evidence of ransomware exploitation.
Amazon Web Services / 26/10/2026 08:11:18 HKT
AWS MCP Server／run_script Python sandbox
AWS disclosed CVE-2026-115845 on 23 October 2026. According to AWS, the run_script tool in AWS MCP Server used an incomplete denylist when validating Python code. An authenticated remote user could potentially use a crafted script to execute arbitrary code within their own isolated session. This is a managed service, and AWS has fixed the issue on the service side. The advisory states that no customer action is required.
Anti-Ransomware analysis
Anti-Ransomware analysis: this advisory directly concerns AI agents that can call tools. Although AWS says the server-side fix is complete, businesses should retain MCP tool-call logs, limit agent permissions and available tools, and ensure that sensitive operations do not rely solely on a script sandbox. The advisory does not indicate that any customer has been compromised and does not guarantee product security.
Cisco / 25/10/2026 17:08:58 HKT
Voice Products / 15SU5 security hardening updates
On 21 October, Cisco announced security hardening updates for several communications products, including Unified Communications Manager and Unity Connection. The advisory sets out fixed-version arrangements for 15SU5 and requires affected 14-series deployments to migrate to a fixed version. Cisco said it was not aware of related malicious exploitation at publication.
Anti-Ransomware analysis
Telephone and collaboration systems also belong in the patching plan. This is an official update notice; it does not establish that any organisation using the product has been compromised. Check your product, version and compatibility before upgrading.