ESET reviews a week of PHP, kernel, and LiteLLM incidents
PHP fixes shipped October 21; nine firms, including ESET, told NBC News they had seen no successful PHP2Shell attacks.
58
Product
GitLab
- Mentions · 7d1
- Mentions · 30d11
- All mentions29
- First seenAug 18, 2026
- Last mentioned2d ago
Timeline
29 articles · newest firstTop 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
GitLab security advisory (AV26-1028)
Canada's Cyber Centre urges updates for critical GitLab patches before versions 19.2.8, 19.3.5, and 19.4.2.
58
CVE-2026-97229: Critical GitLab RCE
GitLab patched CVE-2026-97229, a CVSS 10.0 unauthenticated RCE in self-managed servers.
78
Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies
CISA added five Flax Typhoon-exploited flaws to the KEV catalog, with a federal patch deadline of October 11.
86
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
52
FBI disrupts Chinese hacking tools used to breach critical infrastructure
FBI seized Flax Typhoon domains for tools used in critical-infrastructure intrusions.
86
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
FBI and six countries say China-linked Integrity Technology Group stole emails and shared them via a third-party portal.
79
Ransomware Hacker Uses AI Coding Assistant as Attack Channel Against Enterprise Networks
Ransomware affiliate Azazel used an AI coding assistant's MCP tools to attack more than two dozen organizations.
82
Gentlemen Ransomware Affiliate Uses MCP as C2 Channel in Live Cyberattacks
Gentlemen ransomware affiliate Azazel used Model Context Protocol as live command-and-control across victims in six countries.
78
Lumma, RedLine and Vidar Infostealers Fuel Cloud Credential Theft Campaigns
Lumma, RedLine, and Vidar steal cloud and developer credentials, enabling session hijacking that bypasses MFA.
62
GitLab issue email’s only security is obscurity
GitLab issue-creation emails embed an account-wide token that can open merge requests and run CI/CD.
64
The Infostealer Incursion: How Stolen Credentials Breach Cloud, Code, and AI Environments
Wiz finds Lumma, RedLine, and Vidar dominate infostealer theft of AWS, GitHub, and OpenAI credentials from endpoints.
64
Metasploit Wrap Up: Belgian Waffles, Chocolates, and…Modules-Frites?
Metasploit 6.5.5 adds modules for in-the-wild GitLab file read, IPv6 DNS takeover, and Langflow RCE.
75
GitLab security advisory (AV26-962)
Canada's Cyber Centre urges GitLab updates to 19.2.7, 19.3.3, or 19.4.1 after a critical patch release.
56
GitLab Outage
A Hacker News post points to GitLab's status page during an outage, without any stated security cause.
6
Exposed GitLab project email addresses let attackers push code
Aikido warns published GitLab incoming-email tokens can let outsiders open merge requests and push code as the owner.
61
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
GitLab incoming email tokens can push code, open merge requests, and run CI/CD while bypassing IP allowlists.
71
A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You
A leaked GitLab incoming-email token lets outsiders commit code and run CI jobs as the account owner.
67
GitLab Email Feature Vulnerability Lets Attackers Push Code Into Private Repositories
Aikido says a leaked GitLab incoming-email token can push patches and trigger CI in victim projects.
66
GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks
GitLab user email addresses embed highly privileged tokens that could enable supply-chain attacks.
66
Refactor GitLab file read module and update documentation
Metasploit Framework commit refactors and updates documentation for an existing GitLab file read module.
20
GitLab security advisory (AV26-917)
Canada's Cyber Centre warns GitLab versions before 19.1.8, 19.2.6 and 19.3.2 are affected; CISA added CVE-2026-85706 to KEV.
72
OpenAI Builds ‘Defense Factory’ Where AI Agents Continuously Find and Fix Vulnerabilities
OpenAI unveils a Defense Factory where AI agents continuously discover, validate, and fix vulnerabilities, integrating GitHub, Snyk, Semgrep, Tenable, and ServiceNow.
55
How Virginia Tech Connected Pentesting to Its Engineering Workflow
Horizon3.ai customer story details Virginia Tech automating external pentesting via NodeZero's GraphQL API with GitLab and ServiceNow integration for remediation tracking.
15
Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps
Wiz published a DFIR cheatsheet covering log visibility, incident readiness, and threat hunting across GitHub, GitLab, Bitbucket, and Azure DevOps.
45
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
GitLab emergency-patches actively exploited flaw CVE-2026-19478 (CVSS 9.4), letting unauthenticated attackers modify or delete public projects on self-managed servers.
78
GitLab Patches Critical Unauthenticated GraphQL Vulnerability
GitLab issued an emergency patch for a critical unauthenticated GraphQL flaw (CVE-2026-19478, CVSS 9.4) enabling remote modification or deletion of public projects.
62
Related CVEs
by mentions- CVE-2015-330699%10.0Arbitrary file read/write via ProFTPD 1.3.5 mod_copy
- CVE-2019-11510100%10.0Unauthenticated Arbitrary File Read in Ivanti Pulse Connect Secure VPN
- CVE-2021-22205100%10.0Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205)
- CVE-2021-319930%9.8Path Traversal RCE in ONLYOFFICE Document Server
- CVE-2016-308197%8.1Command injection RCE in Apache Struts Dynamic Method Invocation
- CVE-2015-5477100%7.5Remote denial of service in ISC BIND via TKEY queries
- CVE-2023-228944%4.9Sensitive-data leak in Strapi admin query filters (through 4.5.5)
- CVE-2014-6278100%—Remote OS Command Injection in GNU Bash via Crafted Environment (Shellshock-family)
- CVE-2026-8570697%10.0Unauthenticated Path Traversal Arbitrary File Read in GitLab CE/EE
- CVE-2026-9722918%10.0Unauthenticated RCE in GitLab CE/EE via CI/CD regex
Appears with
- GitLabvendor · 23
- GitLaborganization · 8
- Microsoftvendor · 7
- Aikido Securityorganization · 4
- GitHubproduct · 4
- Wizorganization · 3
- Rapid7organization · 3
- Microsoft Exchangeproduct · 3
- Rapid7vendor · 3
- Flax Typhoonthreat actor · 3
- Canadian Centre for Cyber Securityorganization · 3
- Apache Strutsproduct · 3
- NordStellarorganization · 2
- CloudSEKorganization · 2
- GNU Bashproduct · 2
- Miasmamalware · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.