Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
GitLab Patches Critical CI/CD Flaws That Can Run Code on Servers
Two critical GitLab flaws can turn authenticated continuous integration and delivery (CI/CD) configuration into code execution on self-managed servers.
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass Flaws
Zoom and GitLab have released security updates to resolve a number of security vulnerabilities that could result in denial-of-service (DoS) and remote code exe…
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts
Cybersecurity researchers have discovered an indirect prompt injection flaw in GitLab's artificial intelligence (AI) assistant Duo that could have allowed atta…
New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution
GitLab has released security updates for Community Edition (CE) and Enterprise Edition (EE) to address eight security flaws, including a critical bug that coul…
GitLab Addressed Critical SAML Auth Flaw With The Latest Release
A severe SAML authentication vulnerability affected GitLab, which could allow an adversary to bypass SAML…GitLab Addressed Critical SAML Auth Flaw With The Lat…
GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others
GitLab has released security updates to address 14 security flaws, including one critical vulnerability that could be exploited to run continuous integration a…
GitLab XSS Vulnerability Could Allow Account Takeover
GitLab addressed numerous security updates with the latest release. These include a high-severity XSS vulnerability…GitLab XSS Vulnerability Could Allow Accoun…
CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical flaw impacting GitLab to its Known Exploited Vulnerabilities (KEV) catalo…
GitLab Patched A Workspace Creation Vulnerability With An Emergency Update
Days after releasing a major update, GitLab rolled out another emergency update addressing a serious…GitLab Patched A Workspace Creation Vulnerability With An …
GitLab Addressed A Critical Zero-Click Vulnerability With Latest Updates
Heads up, GitLab users! It’s time to upgrade to the latest GitLab versions, as the…GitLab Addressed A Critical Zero-Click Vulnerability With Latest Updates on …
Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP
GitLab has released security updates to address two critical vulnerabilities, including one that could be exploited to take over accounts without requiring any…
GitLab Releases Urgent Security Patches for Critical Vulnerability
GitLab has shipped security patches to resolve a critical flaw that allows an attacker to run pipelines as another user.The issue, tracked asCVE-2023-5009(CVSS…
GitLab Released Emergency Fix For Critical Vulnerability – Update Now!
GitLab has recently rolled out an emergency update, patching a critical path traversal vulnerability. Users…GitLab Released Emergency Fix For Critical Vulnerab…
GitLab Patched Multiple Security Bugs, Including A Critical RCE, With Latest Releases
Heads up, GitLab users! GitLab has recently addressed multiple security bugs with the latest releases.…GitLab Patched Multiple Security Bugs, Including A Criti…
New Security Vulnerability Affects Thousands of Self-Managed GitLab Instances
Researchers have disclosed details of a new security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, unauthenti…
New Security Vulnerability Affects Thousands of GitLab Instances
Researchers have disclosed details of a now-patched security vulnerability in GitLab, an open-source DevOps software, that could potentially allow a remote, un…
ArchLinux: 202107-18: gitlab: multiple issu
The package gitlab before version 14.0.3-1 is vulnerable to multiple issues including cross-site request forgery, access restriction bypass, arbitrary code exe…
GitLab Fixed Elasticsearch API Flaw That Could Expose Private Groups
GitLab has addressed a security vulnerability that could have exposed private groups. The flaw existed in the Elasticsearch API thatGitLab Fixed Elasticsearch …
GitLab Addressed Multiple Important Vulnerabilities With The Latest Releases
GitLab has recently addressed numerous security vulnerabilities in their latest software releases. While all the flaws belonged to different categories,GitLab …
Fedora 44 postgresql16-anonymizer Major Arbitrary Execution CVE-2026-19633
Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases [core] CVE-2026-19633: Escalation via custom types, operators and rangevars [cor…
Fedora 45 PostgreSQL 16 Anonymizer SQL Injection Vulnerabilities Found
Upstream changelog: https://gitlab.com/dalibo/postgresql_anonymizer/-/releases [core] CVE-2026-19633: Escalation via custom types, operators and rangevars [cor…
DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams
Threat actors with ties to the Democratic People's Republic of Korea (aka DPRK or North Korea) have been observed leveraging ClickFix-style lures to deliver a …
Fedora 41: python-libdigit-float Important DoS Update 2026-72c1a39e3d
Update to version 1.11.1. This version includes a fix for a potential DoS-via-zip-bomb issue. Release notes: https://gitlab.com/sequoia-pgp/sequoia-octopus- li…
Falco Graduation Signals Advancements in Cloud Native Runtime Security
In the world of cloud-native computing, security is paramount. The recent announcement by the Cloud Native Computing Foundation (CNCF) about the graduation of …