past ~48 hours in security:

PHP: unauthenticated remote code execution
GitLab: CVSS 10.0 remote code execution
Node.js: Brotli decoder RCE + 9 other flaws
Chrome: 353 security fixes
Signal: a bug that can prevent calls fully ending
eMudhra: compromised CA keys
Oracle: 1,295 security patches
Fortinet: critical/high fixes
Atlassian: 176 vulnerability entries

and that’s after the Linux VM escape disclosed last week.

ask Codex / your agent to check your code, dependencies and infrastructure for exposure to these.

set up automations to regularly check for newly disclosed vulnerabilities and flag what needs patching.