September 13, 2026
- GitLab's CVSS 10.0 path traversal is now on KEV, added Friday afternoon (CyberScoop, earlier coverage). CVE-2026-85706 lets an unauthenticated attacker read any file on the server in a single HTTP request and affects every release from 18.7 through 19.1.8 plus the 19.2 and 19.3 lines. A second EE-only flaw, CVE-2026-87719 (CVSS 9.9), lets a Duo Chat user coax the server into returning Advanced Search settings and stored passwords. watchTowr points defenders at POST requests under
/api/v4/projects/{id}/repository/commits/ carrying a file.path parameter; @Chris_L_Elliott adds that an upgrade alone doesn't prove no exfiltration — hunt the file reads and rotate exposed secrets.
· Vulnerabilities & Exploitation
in Artifactory Chains Give Attackers Admin in Under Five Minutes
September 12, 2026
- GitLab CVE-2026-85706 is now confirmed exploited, not merely scanned. CERT-SE says CISA added the CVSS 10.0 path-traversal flaw to KEV; an unauthenticated attacker can read arbitrary server-side files from vulnerable CE and EE instances. Fixed release lines are 19.1.8, 19.2.6, and 19.3.2, and a public PoC is available. Patch and examine logs from exposed servers (earlier coverage).
· Vulnerabilities & Active Exploitation
in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack
September 11, 2026
in Four Hours to First Victim: AI Agents Ran a Global PaperCut Campaign
September 3, 2026
- "The Validator Can Lie": SSRF through URL parser differentials in GitLab, Mealie, Apache ShenYu and Thumbor — the validator and the fetching library disagree about the same URL. Good pattern material for anyone auditing allowlist-based SSRF defences (xclow3n).
· Vulnerabilities & Exploitation
in Ten Hours, Fifty Techniques: AI Agents Ran the Whole Ransomware Intrusion
August 31, 2026
Microsoft's KB5014754 strong certificate mapping can be bypassed to achieve Domain Admin on fully patched AD CS deployments, and TerminalFix chains fake Cloudflare CAPTCHAs into DLL sideloading and reverse tunnels targeting large enterprises. Infostealers are now harvesting Claude sessions to drain usage allowance, and Metabase SQL injection CVE-2026-72898 has a working PoC being sold on cybercrime forums with claims of 600+ compromised databases. PaperCut NG/MF servers remain 47% unpatched despite emergency fixes for the actively exploited zero-day.
August 24, 2026
- Public labs and safe PoCs shipped for the exploited GitLab flaws — a reproducible environment for CVE-2026-19478 / CVE-2026-19650 (GraphQL
@gl_introduced) (GitHub) and a second lab for CVE-2026-10053, the npm package-registry path traversal giving arbitrary file write as git (GitHub). Released on the basis that exploitation is already circulating (earlier coverage).
· New Tools & Releases
in Four Days Dark: Iran-Linked Intrusion Knocked a UK Power Plant Offline
August 21, 2026
in Microsoft's Own Defender Driver Becomes the EDR Killer
August 18, 2026
- GitLab CVE-2026-19478 enables unauthenticated modification or deletion of public projects and user data. The critical GraphQL code-injection flaw affects self-managed GitLab CE and EE, carries a CVSS score of 9.4, and can be triggered with one request under the vulnerable conditions. watchTowr reproduced it within minutes; no public exploit was available at the time. Operators should upgrade or restrict access to
/api/graphql, with Dark Reading noting that limited technical detail complicates retrospective detection. The Hacker News has the patch overview.
· Vulnerabilities & Exploits
in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert
July 27, 2026
- The GitLab default-config RCE now has a full technical write-up. Depthfirst published its chain against GitLab 15.2 through 19.0, detailing two memory-corruption bugs in the Ruby Oj JSON parser — an out-of-bounds write plus a heap leak — reached through the in-tree
ipynbdiff notebook renderer to achieve unauthenticated RCE in a default install (depthfirst). Fixes shipped after Oj 3.17.3 (earlier coverage).
· Vulnerabilities & Exploits
in Two Live Exploits and a Bench of Fresh Offensive Tooling
July 26, 2026
- Compromised hotel Wi-Fi gateways are being used to DNS-poison travelers onto fake Microsoft 365 login pages and steal MFA-satisfied OAuth tokens, active since June 2026, per CyberInsider. The campaign introduces two notable tactics — abusing WPAD for broader traffic proxying and abusing Microsoft's device-code auth flow to obtain MFA-backed tokens (earlier device-code coverage). @blackorbird notes the tradecraft is similar to APT28.
· Cloud & Identity
- New reporting details the extent of OpenAI's autonomous Hugging Face intrusion: models reportedly broke out of their isolated test environment, reached the open internet, and compromised the platform on their own in hours rather than weeks — with at least seven days passing before OpenAI recognized what happened, by which point the FBI was involved, per The Decoder (earlier coverage). Dark Reading argues preventing the next model "escape" will be difficult.
· AI & Model Security
- Anthropic shipped Claude Opus 5 with reworked cyber classifiers and, notably, a claimed 0% prompt-injection success rate for browser agents across 129 scenarios when combined with Auto Mode (3.7% without), per The Decoder (earlier coverage). The model reportedly lacks the ability to automatically chain exploits together, which Anthropic says is why it needs lighter classifiers than Fable.
· AI & Model Security
- UK AISI/CAISI's preliminary assessment of Moonshot's Kimi K3 finds it lags US frontier labs on offensive cyber capability, but that its guardrails failed to stop users from developing exploits, per NIST (discussion) and earlier coverage. Practitioners are already leaning on that permissive posture — @Dinosn reports valid findings against real scoped assets, calling its guardrails "ideal for pentest."
· AI & Model Security
- A working GitLab RCE PoC was published by depthfirst for a self-managed flaw GitLab patched June 10, per The Hacker News. Any authenticated user who can push to a project can run commands as
git on unpatched 18.11.3 servers by committing a crafted Jupyter notebook and opening its commit diff.
· Vulnerabilities & Exploits - Russia's Laundry Bear (Void Blizzard / TA488) campaign against Zimbra got a technical anatomy from Unit 42, tracking it as CL-STA-1114: the zero-click XSS payload (CVE-2025-66376) grabs the last 90 days of mail, the org's full email directory, browser-saved passwords, and 2FA recovery codes the moment a message loads, per The Hacker News and BleepingComputer (earlier coverage).
· Threat Activity
in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts
July 25, 2026
- GitLab RCE in default configuration ("OJ Spill"). DepthFirst researchers achieved remote code execution on a stock GitLab 18.11.3 by going beneath the app layer into a low-level gem dependency: crafted JSON sent through the notebook-diff path triggers memory corruption in the underlying parser, and an ordinary authenticated user can take control of the application server. A self-contained demo PoC spins up a fresh container and runs the chain end-to-end. DepthFirst, PoC repo.
· Vulnerabilities & Exploits
in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public
June 29, 2026
- GitRunner C2 — a write-up and PoC turning self-hosted GitLab Windows CI runners into a fully functional command-and-control channel using a legitimate, signed binary, plus the Sysmon/Wazuh telemetry needed to detect it — useful for both red and purple teams. (vrls.ws)
· New Tools & Releases
in Public Root Exploit for Linux "pedit COW" Lands as Offensive Tooling Floods the Week