News
cybersecurity Lazarus hackers use post-quantum cryptography for malware delivery - BleepingComputer cybersecurity Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security - Dark Reading cybersecurity Cloud Security Alliance Survey Finds Data Loss Prevention Often Detects Data Loss Only After It Happens - Dark Reading cybersecurity 'PHP2Shell' Bugs Signal Red Alert for Security Industry - Dark Reading cybersecurity Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases - The Hacker News cybersecurity CISA: Hackers chain Plex flaws in Plex2Shell attacks to breach servers - BleepingComputer cybersecurity AI-driven, large-scale nation-state campaign using ARTEX enables supply chain compromise - Microsoft Security Blog cybersecurity LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor - The Hacker News ai Anthropic Adds Continuous Scanning and Fix Tracking to Claude Security - Unite.AI - Anthropic - Claude AI cybersecurity Kwetsbaarheden PHP: patches beschikbaar - update nu - NCSC Netherlands threat-intel Arrakis Security Report Finds 76% of AI Agents Are Dormant but Keep Their Credentials and Connections - GBHackers ai How AT&T is rethinking in-house legal work with OpenAI - OpenAI - ChatGPT & AI Research cybersecurity PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors - SecurityWeek cybersecurity OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors - Dark Reading cybersecurity OpenAI's GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So - The Hacker News
1 / 15
All news ›
Cybersecurity

Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases

The Hacker News ·

GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without logging in, and it affects every version of the software going back to 7.0, released in 2014. The fix matters even for administrators who patched nine days earlier: the October 12 update covered only versions 19.2 and later, and the new fixed versions sit one patch above it, so an

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.