GitLab’s critical flaw is already drawing internet-wide probes
One flaw allows an unauthenticated attacker to read files from the server. GitLab urged operators of self-managed installations to upgrade immediately.
Advertisement
Showing 10 of 191 results
-
Threats -
Programmable Logic Controller PLC System in Industrial Cabinet – stock photo, Ivan Shevchenko, Getty Images AI AI-fueled attacks pose ‘active threat’ to water, other sectors, U.S. agencies warn
The agencies said the hackers are taking aim at Siemens S7 Series programmable logic controllers in what could be a first.
-
A new national security memo allowing the private sector to go after criminals in cyberspace leaves legal quandaries. (Photo by Chip Somodevilla/Getty Images) Government A bold new strategy or a dangerous precedent? Experts are divided on Trump’s memo.
The “philosophical shift” that the memo authorizes raises legal, practical and moral questions, experts say.
-
A spider hangs from the railing of a pedestrian bridge. (Moritz Frankenberg/Getty Images) Research Leading members of Scattered Spider sentenced in UK to 66 months in jail
Thalha Jubair and Owen Flowers led and directed many attacks attributed to the hacker subset of The Com. U.S. authorities previously accused Jubair of participating in at least 120 attacks.
-
This photograph shows a laptop screen displaying the logo of the First VPN service website in Quimper on May 21, 2026. (Photo by Fred TANNEAU / AFP) Financial Treasury sanctions First VPN Service, others for abetting ransomware gangs
The designations hit 1VPNS, its alleged Ukrainian administrator and a Belarusian who allegedly sold “cryptors” to disguise ransomware and other malware.
-
Gwengoat, iStock/Getty Images Plus Threats Spain arrests suspected hacker linked to Russian hacktivist campaign
Authorities didn’t name the man or file formal charges, but accuse him of participating in attacks linked to Cyber Army of Russia Reborn and NoName.
-
Anthropic announced the release of two new Mythos-class artificial intelligence models designed for cybersecurity and biomedical research, targeting both consumers and businesses. (Photo by Samuel Boivin/NurPhoto via Getty Images) Government US lifting export control restrictions on Anthropic’s Mythos, Fable
The company and the Commerce Department say they have reached an agreement that will see the AI models released publicly with new guardrails and classifiers.
-
The headquarters of the Federal Bureau of Investigation on August 16, 2022, in Washington. (Matt McClain/The Washington Post via Getty Images) Government FBI takes down massive China-based cybercrime network that caused $1.9B in losses
Outsider provided phishing kits and infrastructure for cybercriminals to scam victims with lures claiming they missed packages, had unpaid tolls or parking violations.
-
(Getty Images) Government CISA directive orders agencies to prioritize vulnerability patching in a new way
A vulnerability that meets all four criteria would need to be fixed within three days, for instance.
-
Cybercrime Vercel’s security breach started with malware disguised as Roblox cheats
The attack, which originated at Context.ai, showcases the pitfalls of interconnected cloud applications and SaaS integrations with overly privileged permissions.