A Critical Vulnerability in GitLab Exposes Sensitive Data – What You Need to Know The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are now exploiting a maximum-severity vulnerability in GitLab’s DevSecOps platform. The security flaw, tracked as CVE-2026-85706, allows attackers to read sensitive information from vulnerable servers without authentication. … Read more
A Critical Vulnerability in GitLab’s DevSecOps Platform is Being Exploited in Attacks, CISA Warns The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning that hackers are taking advantage of a maximum-severity vulnerability in GitLab’s popular DevSecOps platform. The security flaw, tracked as CVE-2026-85706, allows attackers to read sensitive information from vulnerable servers … Read more
**Critical Vulnerabilities Exploit in Widely Used Security Software** A new wave of attacks is sweeping through the internet, targeting a critical vulnerability in a popular security software package used by millions of individuals and organizations worldwide. The exploit, which allows malicious actors to gain unauthorized access to systems and sensitive data, has been identified as … Read more
A sophisticated phishing campaign is targeting organizations worldwide, using a clever trick to evade detection and deliver malware to unsuspecting victims. The campaign, which was first spotted by SANS Internet Storm Center (ISC) analysts on Monday, September 14th, leverages compromised email accounts to send highly convincing phishing messages that appear to come from trusted sources. … Read more
As AI development accelerates at breakneck speed, warnings from industry leaders are sounding louder than ever. Dario Amodei, CEO of Anthropic, has called for a slowdown in AI development to give safety measures time to catch up. Without such a pause, he warns that within six to 12 months AI could be capable of leading … Read more
A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited by Chinese-aligned threat actors to deploy a sophisticated backdoor malware known as GrayRabbit. The security flaw, identified as CVE-2026-51990, allows attackers to execute malicious code with just one click, putting hundreds of millions of users at risk. The vulnerability is being actively … Read more
As the AI industry hurtles towards a potentially catastrophic future, its leaders are finally acknowledging the elephant in the room. In a candid warning, Dario Amodei, CEO of Anthropic, has urged his peers to slow down their breakneck development pace and give safety measures time to catch up. The stakes are high: without a slowdown, … Read more
Hackers Exploit Critical Flaw in Tencent App to Deploy Malicious Backdoor A critical vulnerability in Tencent’s Sogou Input Method for Windows has been exploited by threat actors linked to a China-aligned espionage group, allowing them to deploy the GrayRabbit backdoor on compromised systems. This security issue is a one-click remote code execution (RCE) flaw that … Read more
Cyberattackers have been exploiting a weakness in Microsoft’s cloud authentication system, using a technique known as passkey phishing to gain unauthorized access to user accounts and steal sensitive data. The attackers are targeting users of Microsoft Azure Active Directory (Azure AD), which is used by millions of businesses worldwide for identity management and access control. … Read more
Hackers have discovered a new tactic to gain unauthorized access to sensitive Microsoft cloud accounts, exploiting user trust in their passkeys. The attackers use phishing emails that mimic legitimate login prompts, tricking victims into revealing their passkeys and subsequently taking control of their cloud resources. Microsoft’s cloud services, which include Azure Active Directory (AAD) and … Read more