Apigee X
Security
On May 20, 2026, we published a security bulletin for Apigee.
A vulnerability was found in Apigee
(CVE-2026-2264)
where the IntegrationRegion
parameter in the SetIntegrationRequest policy lacks validation,
allowing for Server-Side Request Forgery (SSRF) and service account token
exfiltration. The issue arises when an attacker can control a flow variable used
for IntegrationRegion, leading to requests being sent to an
attacker-controlled host with the service account token.
Security bulletin published: GCP-2026-034
Cloud Service Mesh
Announcement
Cloud Service Mesh can now report a status code to indicate whether an Istio API is accepted or rejected. You can view the status code on the resource and mesh state. For more information see MembershipState Error Codes.
Google SecOps Marketplace
Change
AlienVault USM Appliance: Version 27.0
- Refactored the code for the following action:
- Get PCAP Files For Events
Change
Protectwise: Version 6.0
- Refactored the code for the following action:
- Get Pcap
Change
Service Desk Plus: Version 9.0
- Refactored the code for the following action:
- Create Alert Request
Change
Service Desk Plus V3: Version 9.0
- Refactored the code for the following action:
- Create Alert Request
Change
ServiceNow: Version 66.0
- Updated the code for the following action:
- Update Incident: Added support for updating reference fields.
Change
Google Chronicle: Version 83.0
- Added support for filtering alerts by rule type to the following connector:
- Google Chronicle – Chronicle Alerts Connector
Change
Tanium: Version 20.0
- Integration: Added a partner header to all API requests.
Guest Environment
Fixed
Version 20260511.00 of the guest agent
is now available for all supported operating systems. This is a rebuild of
version 20260423.01 announced in the
April 27, 2026 release notes.
It includes no additional changes and is released specifically to trigger a guest agent restart.
Between May 4, 2026, and May 11, 2026, the control plane accidentally sent an erroneous request to remove the core plugin. This caused the agent to stop functioning, which disrupted features that rely on it, such as SSH and Windows password resets. This package update automatically restarts the agent on instances where auto-update is enabled to resolve the issue.
Oracle Database@Google Cloud
Feature
Oracle Database@Google Cloud supports Oracle Cloud Infrastructure Goldengate. You can create Goldengate deployments and connections to replicate and transform data between systems.
This feature is Generally Available (GA).
Source: Google Cloud Platform
