GitLab Alert: Public Exploit for Critical RCE Vulnerability, the Fix Was Hidden in an Ordinary Bug
A public exploit targets a critical GitLab RCE flaw via Jupyter notebooks. Learn about the hidden bug fix and patch your self-hosted instances.
Vulnerabilities
More news
Page 38 / 38 · 342 articles
Cyber Threats and Offensive AI: The Landscape as of July 26, 2026
Explore the July 2026 cyber threat landscape: critical software vulnerabilities, ransomware, and state-sponsored attacks leveraging offensive AI.
CVE-2026-16723: Critical RCE in Fastjson 1.x, Active Exploitation in Spring Boot Environments
CVE-2026-16723 is a critical Fastjson 1.x RCE flaw exploited in Spring Boot fat-JAR apps. Learn how it works and mitigate risks by enabling SafeMode.
IRIS C2: The Offensive Exploit Company with a Criminal Past
IRIS C2, led by fraudsters Burkman and Wohl, targets zero-day researchers. Discover why selling exploits to them poses severe legal and security risks.
Record Patch Tuesday July 2026: Over 570 Fixes, AI Accelerates the Vulnerability Race
Microsoft's July 2026 Patch Tuesday delivers a record 570+ fixes. Learn how AI accelerates vulnerability discovery and reshapes cybersecurity.
Two Critical Vulnerabilities in Bing: Command Execution as SYSTEM and Root via Malicious SVGs
On July 23, 2026, researchers from XBOW publicly disclosed technical details of two critical vulnerabilities affecting Microsoft Bing, identified as
AgentForger: When a Phishing Link Is Enough to Create a Persistent AI Insider
A CSRF flaw in ChatGPT Workspace, AgentForger, allowed a phishing link to create a persistent AI insider, risking data theft and remote command execution.
Certighost: The Attack That Steals Domain Controller Identity via AD CS
Certighost exploits CVE-2026-54121 in AD CS, letting low-privileged users steal DC certificates and compromise Active Directory forests via DCSync.
Infectious Hallucinations: Slopsquatting and New Supply Chain Attacks in the Age of AI Agents
Discover how AI agent hallucinations fuel new supply chain attacks like Slopsquatting and HalluSquatting, compromising CI/CD pipelines and developers.