GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04…
The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences for their alleged roles…
A newly disclosed critical vulnerability in GitLab, tracked as CVE-2026-19478 (CVSS 9.4), is already being actively exploited in the wild, according to…
GitLab has released emergency security updates to address a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) that could…
A high-severity CSRF vulnerability in GitLab's GraphQL multiplex query handler could allow unauthenticated users to execute mutations via GET requests due to…
Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit for a remote code execution (RCE) vulnerability in self-managed…
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
GitLab was the most affected platform according to StepSecurity analysis, with 1,064 organizations impacted.
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…