Change Risk Intel

This Week in Change Risk — Week of Nov 9, 2026

Ben Ennis — Fri, 13 Nov 2026 14:00:00 GMT

11 KEV adds incl. OpenSSH and Barracuda, a GitHub migration that hit Actions, Cloudflare's Workers change outage, Jira's 422 limits and NIST SP 800-221r1.

Read the full analysis on Change Risk Intel →

Google Cloud europe-west2 Incident Report: 6 Lessons for CABs

Ben Ennis — Wed, 11 Nov 2026 13:00:00 GMT

Google's report on the October 20 London outage traces it to a maintenance posture and a PLC flaw. What it means for failover, capacity and change review.

Read the full analysis on Change Risk Intel →

November 2026 Patch Tuesday: A CAB Plan for 1,000+ CVEs

Ben Ennis — Mon, 09 Nov 2026 13:00:00 GMT

November 10 shipped 1,094 Microsoft CVEs, 63 Critical and one exploited Outlook flaw (KEV due Nov 24). How a CAB triages it, plus .NET end of support.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Nov 2, 2026

Ben Ennis — Fri, 06 Nov 2026 14:00:00 GMT

Ivanti, WordPress and a 2024 Apple flaw join KEV, GitHub's retry-storm RCA, Datadog's Q3 usage warning, NIST CSWP 50 and Alpine's sshd restart lesson.

Read the full analysis on Change Risk Intel →

WordPress CVE-2026-119977: When the Upgrade Is the Risk

Ben Ennis — Wed, 04 Nov 2026 13:00:00 GMT

CISA's WordPress KEV entry is due Nov 6 and the exposure sits in the upgrade itself. How to scope, triage and run the core update as an emergency change.

Read the full analysis on Change Risk Intel →

Provider Incident Evidence Retention: Keep It Past 90 Days

Ben Ennis — Mon, 02 Nov 2026 13:00:00 GMT

AWS, Azure, Google, Cloudflare and GitHub drop most incident history within 30-90 days. How to keep provider evidence for SOC 2, SOX and PCI change audits.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Oct 26, 2026

Ben Ennis — Fri, 30 Oct 2026 13:00:00 GMT

php2shell, Cisco ASA and GitLab KEV adds, three entries with months-old fixes, Cloudflare's provider outage, ServiceNow Q3 margins, PCI's Oct 31 sunsets.

Read the full analysis on Change Risk Intel →

php2shell KEV Deadline: Evidence First, Then the Emergency Patch

Ben Ennis — Wed, 28 Oct 2026 12:00:00 GMT

CISA's php2shell KEV entries are due Oct 29 and flagged for forensic triage. How to run the emergency change: collect evidence, patch, restart, verify.

Read the full analysis on Change Risk Intel →

eMudhra Certificate Compromise: A Trust Store Change Runbook

Ben Ennis — Mon, 26 Oct 2026 12:00:00 GMT

Browsers blocked the eMudhra intermediates on day 0. Servers, containers and runtimes may not have. A change runbook before Chrome drops the root Oct 27.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Oct 19, 2026

Ben Ennis — Fri, 23 Oct 2026 13:00:00 GMT

Plex and BeyondTrust KEV adds, PHP's critical RCE fix, Google's europe-west2 power failure, the eMudhra CA compromise, and GitLab's fourth critical patch.

Read the full analysis on Change Risk Intel →

Google Cloud europe-west2 Outage: What One Zone Failure Exposed

Ben Ennis — Wed, 21 Oct 2026 12:00:00 GMT

How the October 20 europe-west2-b outage unfolded update by update, how zonal and regional designs behave in a zone loss, and what CABs do mid-incident.

Read the full analysis on Change Risk Intel →

Cloud Provider Health Feeds: AWS, Azure, Google, Cloudflare

Ben Ennis — Mon, 19 Oct 2026 12:00:00 GMT

AWS Health, Azure Service Health, Google Personalized Service Health and Cloudflare alerts compared as ITSM inputs: scope, API access, history and gaps.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Oct 12, 2026

Ben Ennis — Fri, 16 Oct 2026 13:00:00 GMT

Seven KEV adds with 3-day deadlines, a record Patch Tuesday, Cloudflare's rough week in Ashburn, ServiceNow AI Passport, and PCI SSC's Oct 31 sunsets.

Read the full analysis on Change Risk Intel →

Ivanti Connect Secure CVE-2026-104935: Patching Is Not Recovery

Ben Ennis — Wed, 14 Oct 2026 12:00:00 GMT

CVE-2026-104935 hit Ivanti Connect Secure with a 3-day KEV deadline, a missed integrity check and an unpatched third bug. A change plan beyond the patch.

Read the full analysis on Change Risk Intel →

October 2026 Patch Tuesday: A CAB Plan Through Year-End

Ben Ennis — Mon, 12 Oct 2026 12:00:00 GMT

Oct 13 Patch Tuesday lands on 33 Microsoft lifecycle changes, a Secure Boot CA expiry and the last Exchange ESU month. A CAB plan for Q4 and the freeze.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Oct 5, 2026

Ben Ennis — Fri, 09 Oct 2026 13:00:00 GMT

This week's change-risk digest: five old CVEs back on KEV, a NetScaler SAML bug, four critical GitHub incidents, and FedRAMP's Rev5 cutoff date.

Read the full analysis on Change Risk Intel →

Zammad KEV: When Your Helpdesk Becomes the Breach Path

Ben Ennis — Wed, 07 Oct 2026 12:00:00 GMT

CISA added two Zammad flaws to KEV after a breach at DIVD. What the chain exposes, why the vendor and CSIRT disagree, and how to treat your helpdesk.

Read the full analysis on Change Risk Intel →

Deployment Rings: How Staged Rollouts Fit Into Change Control

Ben Ennis — Mon, 05 Oct 2026 12:00:00 GMT

How deployment rings and staged rollouts cap the blast radius of a bad change, what Apple, Google, AWS and Azure stages do, and what a CAB should require.

Read the full analysis on Change Risk Intel →

This Week in Change Risk — Week of Sep 28, 2026

Ben Ennis — Fri, 02 Oct 2026 13:00:00 GMT

This week's change-risk digest: exploited NetScaler, FortiMail and SD-WAN bugs, an Azure outage from two colliding changes, and PCI Secure SLC v2.0.

Read the full analysis on Change Risk Intel →

Cloud Provider Incidents: A Standing Item for Your CAB Agenda

Ben Ennis — Mon, 28 Sep 2026 12:00:00 GMT

How to make upstream cloud incidents a standing CAB agenda item: triggers, owners, and what AWS, Azure, Google Cloud, and Cloudflare actually publish.

Read the full analysis on Change Risk Intel →