GitLab CVE-2026-97229: Unauthenticated RCE — Patch Now
GitLab patched a CVSS 10.0 unauthenticated RCE (CVE-2026-97229) on Oct 12. Rapid7 confirmed and published a PoC. Self-managed CE/EE must upgrade now.
AdFection: Spyware Now Delivered via Targeted Ads
Citizen Lab confirmed zero-click spyware delivery through online ads. No click needed — just viewing ...
Ivanti Connect Secure Zero-Day Chain Gives Attackers Root — Patch by October 16
Three chained vulnerabilities in Ivanti Connect Secure (CVE-2026-104935, CVSS 8.6) enabled unauthenticated root access on ...
FBI Arrests OpenAI Engineer Who Bugged His Own Employer
An OpenAI engineer planted a $14 spy device in the company’s executive conference room. OpenAI ...
AI Agent Containment Failures: 400 Scientists Demand Action
Anthropic, Meta, OpenAI, and Google all lost control of AI agents this year. Now 400 ...
.NET 11 RC2: Post-Quantum Crypto and a Go-Live License That Actually Means Something
.NET 11 RC2 ships with a go-live support license and experimental ML-KEM post-quantum cryptography. Here is what changed, what to test, and what ...
AISLE Found 75% of curl 8.23.0 CVEs: Frontier AI Found Zero
AISLE's AI platform found 18 of 24 CVEs fixed in curl 8.23.0 — 75% of ...
HashiCorp Kills Boundary Community Edition: Act Now
HashiCorp archived the Boundary Community Edition GitHub repository on October 8 — no advance notice, ...
Docker Hub CVE-2026-105445: A 25-Month Silent Flaw
A critical Docker Hub flaw let attackers impersonate users and push container images for 25 ...
Microsoft October 2026 Patch Tuesday: Patch This Now
Microsoft's October 2026 Patch Tuesday patches 1,411 CVEs including an actively-exploited Windows Shell zero-day. CISA ...