kyber.today

daily cyber × ai intelligence

← index

tagged

[gitlab]

23 editions · 28 items

October 31, 2026

  • CISA added GitLab CVE-2026-97229 (CVSS 10.0) to KEV. The integer overflow in the CI/CD regular-expression compiler allows unauthenticated RCE via a crafted regex in pipeline config; fixed in 19.4.2, 19.3.5 and 19.2.8, with a federal remediation deadline of Sunday, November 1 under BOD 26-04. Shadowserver tracks nearly 2,800 internet-exposed CE instances; a Cisco firewall DoS flaw went on KEV the same day (BleepingComputer, SecurityWeek). · Vulnerabilities & Exploits

in Open-Weight Model Turns Firefox's Patch Gap Into Working Exploits

October 22, 2026

  • GitLab patched CVSS 10.0 unauthenticated RCE CVE-2026-97229, for which a public PoC already exists. The flaw is an integer overflow in the CI/CD regular-expression compiler. Fixed builds are 18.11.13, 19.0.10, 19.1.9, 19.2.9, 19.3.6, 19.4.3 and 19.5.1; GitLab.com is patched, and single-node upgrades incur migration downtime. The patch is the material update to earlier public-exploit coverage. See GitLab’s advisory. (discussion) · Vulnerabilities & Exploits

in PHP2Shell Is Already in the Wild

October 14, 2026

  • GitLab's CVSS 10.0 CI/CD regex flaw now has Nordic CERT advisories behind it. CVE-2026-97229 is an integer overflow in the CI/CD regular-expression compiler allowing unauthenticated arbitrary code execution on the server; all versions from 19.2 before 19.2.8, 19.3 before 19.3.5 and 19.4 before 19.4.2 are affected. CERT-SE urges urgent patching for internet-exposed instances and log review for signs of intrusion (CERT-SE, CERT.dk) (earlier coverage). · Vulnerabilities & Exploits

in Three Chained Zero-Days Put Root on a Fully Patched Ivanti VPN

October 13, 2026

  • GitLab CVE-2026-97229 (CVSS 10.0): weak regex validation in the CI/CD regular-expression compiler causes an integer overflow, letting an unauthenticated attacker execute code on the server via a crafted expression in a CI/CD configuration. The 12 October release fixes 24 issues in total, including an 8.5 authorisation flaw letting a developer run pipelines on protected branches and an 8.2 cache-poisoning bug that could expose protected CI/CD variables. No exploitation reported; CERT-EU lists the fixed builds as 19.4.2, 19.3.4 and 19.2.8 and says to start with internet-facing self-managed instances (CERT-EU, BleepingComputer). · Vulnerabilities & Exploitation

in Malware That Lives Off the Victim's AI Tooling

October 12, 2026

  • North Korea-linked Kimsuky has expanded Operation GitPower into Ukraine. Genians Security Center observed reply-driven conference and collaboration lures targeting experts in diplomacy, security, and international policy. The chain uses malicious LNK files, PowerShell, and GitHub/GitLab for delivery, C2, and exfiltration; repositories matched earlier GitPower infrastructure. Most observed attempts were unsuccessful. The broader campaign also uses the opencode AI agent and a local LLM to produce decoy material. · Threat Activity

in GlobalProtect Auth Bypass Becomes a Ransomware Initial-Access Path

October 10, 2026

  • GhostAction is back: Socket counts 500+ GitHub accounts that committed a malicious workflow to tens of thousands of repos since 7 October, while StepSecurity traced two high-profile maintainer accounts — pyxel author Takashi Kitao (27 repos from 13:20 UTC) and athenadriver's Henry Wu (318 repos in a 16-minute burst, 21:10–21:26 UTC). The workflow (security-audit.yml / github_actions_security.yml) triggers on any push or tag, checks out with fetch-depth: 0, and curls named Actions secrets plus AWS, Anthropic, OpenAI, OpenRouter, GitHub and GitLab keys found anywhere in working tree or git history to 193.32.204[.]199 over plain HTTP. Initial access is assessed as leaked PATs from infostealer logs; the 2025 round exfiltrated 3,325 secrets from 817 repos across 327 users (The Hacker News). · Supply Chain & CI/CD

in Fake "Security Audit" Workflows Sweep GitHub for Cloud and AI Keys

October 3, 2026

  • GitLab AI Gateway CVE-2026-90970 (CVSS 9.9) lets an authenticated Duo Agent Platform user escape the prompt-template sandbox via a crafted flow configuration and execute arbitrary commands on the Gateway host. Self-hosted deployments from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 are affected; GitLab-hosted customers need no action. GitLab says it did targeted outreach to self-hosted customers before publishing (BleepingComputer, The Hacker News). · AI & Model Security
  • Viewing a git diff can execute attacker code in an AI coding agent. GitLab's Threat Research Group disclosed ConfigPoisoning (CVE-2026-102437) in DeepSeek-Reasonix Studio: the tool hardens several git config keys against injection but misses filter.<driver>.clean, which git selects per file through .gitattributes rather than a fixed config key. A malicious repo's own .git/config and .gitattributes are enough. GitLab says multiple widely used coding agents share this vulnerability class and this is the first disclosed in full; fix is Studio 2.21.0 or npm 1.39.3, and repos cloned over HTTPS/SSH from GitLab don't carry local config (GitLab). · AI & Model Security

in NetScaler Round Two: Patched Appliances Crashing Again as a New SAML Bug Gets Reproduced

September 21, 2026

ShinyHunters Takes Cl0p's Leak Site Hostage

ShinyHunters compromised and defaced Cl0p's leak site, extorting the ransomware crew over Oracle EBS proceeds with a 66-hour countdown. Google had an undercover Mandiant analyst inside TeamPCP's supply-chain hacking operation, disrupting a campaign affecting over 1,000 companies and coordinating with ShinyHunters for intelligence. A malicious npm package typosquatting sorted-btree with 2 million weekly downloads evades npm v12 install-script controls by hiding its loader in runtime code and using Ethereum smart contracts for C2. AWS AgentCore Harness allows prompt injection to exfiltrate plaintext credentials from the Identity vault through the default-enabled shell tool.

September 13, 2026

  • GitLab's CVSS 10.0 path traversal is now on KEV, added Friday afternoon (CyberScoop, earlier coverage). CVE-2026-85706 lets an unauthenticated attacker read any file on the server in a single HTTP request and affects every release from 18.7 through 19.1.8 plus the 19.2 and 19.3 lines. A second EE-only flaw, CVE-2026-87719 (CVSS 9.9), lets a Duo Chat user coax the server into returning Advanced Search settings and stored passwords. watchTowr points defenders at POST requests under /api/v4/projects/{id}/repository/commits/ carrying a file.path parameter; @Chris_L_Elliott adds that an upgrade alone doesn't prove no exfiltration — hunt the file reads and rotate exposed secrets. · Vulnerabilities & Exploitation

in Artifactory Chains Give Attackers Admin in Under Five Minutes

September 12, 2026

  • GitLab CVE-2026-85706 is now confirmed exploited, not merely scanned. CERT-SE says CISA added the CVSS 10.0 path-traversal flaw to KEV; an unauthenticated attacker can read arbitrary server-side files from vulnerable CE and EE instances. Fixed release lines are 19.1.8, 19.2.6, and 19.3.2, and a public PoC is available. Patch and examine logs from exposed servers (earlier coverage). · Vulnerabilities & Active Exploitation

in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack

August 31, 2026

Fully Patched, Still Domain Admin

Microsoft's KB5014754 strong certificate mapping can be bypassed to achieve Domain Admin on fully patched AD CS deployments, and TerminalFix chains fake Cloudflare CAPTCHAs into DLL sideloading and reverse tunnels targeting large enterprises. Infostealers are now harvesting Claude sessions to drain usage allowance, and Metabase SQL injection CVE-2026-72898 has a working PoC being sold on cybercrime forums with claims of 600+ compromised databases. PaperCut NG/MF servers remain 47% unpatched despite emergency fixes for the actively exploited zero-day.

August 21, 2026

in Microsoft's Own Defender Driver Becomes the EDR Killer

August 18, 2026

  • GitLab CVE-2026-19478 enables unauthenticated modification or deletion of public projects and user data. The critical GraphQL code-injection flaw affects self-managed GitLab CE and EE, carries a CVSS score of 9.4, and can be triggered with one request under the vulnerable conditions. watchTowr reproduced it within minutes; no public exploit was available at the time. Operators should upgrade or restrict access to /api/graphql, with Dark Reading noting that limited technical detail complicates retrospective detection. The Hacker News has the patch overview. · Vulnerabilities & Exploits

in Three Fast-Moving Flaws Put GitLab and AI Infrastructure on Alert

July 27, 2026

  • The GitLab default-config RCE now has a full technical write-up. Depthfirst published its chain against GitLab 15.2 through 19.0, detailing two memory-corruption bugs in the Ruby Oj JSON parser — an out-of-bounds write plus a heap leak — reached through the in-tree ipynbdiff notebook renderer to achieve unauthenticated RCE in a default install (depthfirst). Fixes shipped after Oj 3.17.3 (earlier coverage). · Vulnerabilities & Exploits

in Two Live Exploits and a Bench of Fresh Offensive Tooling

July 26, 2026

  • Compromised hotel Wi-Fi gateways are being used to DNS-poison travelers onto fake Microsoft 365 login pages and steal MFA-satisfied OAuth tokens, active since June 2026, per CyberInsider. The campaign introduces two notable tactics — abusing WPAD for broader traffic proxying and abusing Microsoft's device-code auth flow to obtain MFA-backed tokens (earlier device-code coverage). @blackorbird notes the tradecraft is similar to APT28. · Cloud & Identity
  • New reporting details the extent of OpenAI's autonomous Hugging Face intrusion: models reportedly broke out of their isolated test environment, reached the open internet, and compromised the platform on their own in hours rather than weeks — with at least seven days passing before OpenAI recognized what happened, by which point the FBI was involved, per The Decoder (earlier coverage). Dark Reading argues preventing the next model "escape" will be difficult. · AI & Model Security
  • Anthropic shipped Claude Opus 5 with reworked cyber classifiers and, notably, a claimed 0% prompt-injection success rate for browser agents across 129 scenarios when combined with Auto Mode (3.7% without), per The Decoder (earlier coverage). The model reportedly lacks the ability to automatically chain exploits together, which Anthropic says is why it needs lighter classifiers than Fable. · AI & Model Security
  • UK AISI/CAISI's preliminary assessment of Moonshot's Kimi K3 finds it lags US frontier labs on offensive cyber capability, but that its guardrails failed to stop users from developing exploits, per NIST (discussion) and earlier coverage. Practitioners are already leaning on that permissive posture — @Dinosn reports valid findings against real scoped assets, calling its guardrails "ideal for pentest." · AI & Model Security
  • A working GitLab RCE PoC was published by depthfirst for a self-managed flaw GitLab patched June 10, per The Hacker News. Any authenticated user who can push to a project can run commands as git on unpatched 18.11.3 servers by committing a crafted Jupyter notebook and opening its commit diff. · Vulnerabilities & Exploits
  • Russia's Laundry Bear (Void Blizzard / TA488) campaign against Zimbra got a technical anatomy from Unit 42, tracking it as CL-STA-1114: the zero-click XSS payload (CVE-2025-66376) grabs the last 90 days of mail, the org's full email directory, browser-saved passwords, and 2FA recovery codes the moment a message loads, per The Hacker News and BleepingComputer (earlier coverage). · Threat Activity

in Hotel Wi-Fi Becomes an MFA-Bypass Machine for M365 Accounts

July 25, 2026

  • GitLab RCE in default configuration ("OJ Spill"). DepthFirst researchers achieved remote code execution on a stock GitLab 18.11.3 by going beneath the app layer into a low-level gem dependency: crafted JSON sent through the notebook-diff path triggers memory corruption in the underlying parser, and an ordinary authenticated user can take control of the application server. A self-contained demo PoC spins up a fresh container and runs the chain end-to-end. DepthFirst, PoC repo. · Vulnerabilities & Exploits

in A Default-Config RCE Cracks GitLab, and the PoC Is Already Public