GitLab Patches Critical AI Gateway Command Execution Flaw
GitLab fixes CVE-2026-90970, a critical AI Gateway flaw enabling command execution. Self-hosted users must patch; GitLab-hosted gateways are already protected.
Read more →Latest cybersecurity news, vulnerabilities, and threat intelligence
GitLab fixes CVE-2026-90970, a critical AI Gateway flaw enabling command execution. Self-hosted users must patch; GitLab-hosted gateways are already protected.
Read more →
Fortinet says attackers are exploiting critical FortiMail flaw CVE-2026-104286. Affected organizations should restrict management access and review indicators.
Read more →
Cisco says attackers are exploiting CVE-2026-76504 to gain admin API access to SD-WAN Manager. Fixed releases are available; exposed systems need review.
Read more →
Microsoft says Star Blizzard used RedFlick phishing to affect over 100 organizations, with protected archives, scheduled tasks and the CosmicPulse backdoor.
Read more →
Microsoft linked JadePuffer to an Azure attack that deleted cloud storage accounts through compromised service principals and targeted recovery controls.
Read more →
Citrix patched two actively exploited NetScaler remote code execution flaws. CISA reports attacks worldwide and urges checks for compromise before updates.
Read more →
ShinyHunters are bypassing WAF rules to exploit unpatched Oracle PeopleSoft servers. Mandiant found web shells on dozens of systems across multiple sectors.
Read more →
CISA lists exploited flaws in SharePoint, RouterOS, WSO2 and Adobe Commerce, with federal remediation deadlines on September 27 and 28 for affected agencies.
Read more →
CISA now lists TeamCity CVE-2026-63077 as used in ransomware campaigns. JetBrains urges on-premises users to apply fixes and review exposed build servers.
Read more →
Patchstack reports attackers are using WordPress flaw CVE-2026-87902 to write PHP files. WordPress issued fixes; administrators should update and review logs.
Read more →