CISA has added a critical GitLab vulnerability, tracked as CVE-2026-85706, to its Known Exploited Vulnerabilities catalog, warning that attackers are actively exploiting the flaw.

Your LLM does not need to see everything.

A single HTTP POST request to the /api/v4/projects/{id}/repository/commits/ endpoint is sufficient to bypass security controls and read arbitrary files from a GitLab server. This path traversal ...

GitLab patched a maximum-severity vulnerability that could allow an unauthenticated attacker to read arbitrary files from a self-managed server. CISA added the flaw to its Known Exploited ...

CVE-2026-85706, a CVSS 10.0 GitLab path traversal, was under active exploitation within 24 hours of disclosure.

An autonomous pentesting tool runs the workflow a human attacker would, without waiting for a person to drive each step.

GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706. The security flaw, discovered by a security ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...

This article is based on information as of September 19, 2026. This feature is in "Beta" (a test release one step before the official version), and its availability and specifications may change in ...

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux ...

It all started when I was cleaning up my disk and noticed that `~/.zcode` was over 700MB. When I opened it, I found a 313MB `.enc` file sitting in `v2/checkpoints/`. A developer named ferstar ...

In person - Bring your items with you to your trial. Bring 2 copies of all documents. For audio and video files, you must bring a copy of the file on a USB thumb drive or CD, AND bring a device to ...