TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences for their alleged roles…
Tag: GitLab
GitLab CVE-2026-19478 Actively Exploited Within Days of Disclosure
A newly disclosed critical vulnerability in GitLab, tracked as CVE-2026-19478 (CVSS 9.4), is already being actively exploited in the wild, according to…
Critical GitLab GraphQL Flaw CVE-2026-19478 Allows Unauthenticated Project Deletion
GitLab has released emergency security updates to address a critical vulnerability in its Community Edition (CE) and Enterprise Edition (EE) that could…
GitLab High-Severity CSRF in GraphQL Multiplex Query Handler
A high-severity CSRF vulnerability in GitLab's GraphQL multiplex query handler could allow unauthenticated users to execute mutations via GET requests due to…
Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware
Threat actors are increasingly acquiring expired domains—known as "dropcatch domains"—to inherit their reputation and traffic, redirecting victims to scams and malware. According…
GitLab RCE PoC Exploit Allows Authenticated Users to Execute Commands as Git
Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit for a remote code execution (RCE) vulnerability in self-managed…
SleeperGem Attack: Three Malicious RubyGems Packages Target Developer Machines
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
GitLab Most Affected Platform in TeamPCP Campaign
GitLab was the most affected platform according to StepSecurity analysis, with 1,064 organizations impacted.
ACR Stealer Uses ClickFix Lures to Steal Browser Tokens and Microsoft 365 Files
ACR Stealer, an infostealer active since 2024, is targeting enterprise networks by stealing saved browser passwords, live session tokens, PDFs, Microsoft 365…
GitLab: DevOps Platform and Vulnerability Response
GitLab is a leading DevOps platform providing source code management, CI/CD, and security features. It recently addressed a critical vulnerability (CVE-2026-19478) affecting…