GitLab CVSS 10 RCE - No Auth CI/CD Regex Flaw
GitLab patches CVSS 10.0 unauthenticated RCE in CI/CD regex compiler. Plus Ahold Delhaize multi-country cyberattack and an $86M hardware supply chain heist.
Posts tagged: Ransomware
SonicWall SMA 1000 CVSS 10 Exploited - CVE-2026-102255
CVE-2026-102255 SonicWall SMA 1000 pre-auth SSRF exploited 135+ times. ShinyHunters arrest and AI-orchestrated Ukrainian breach campaign covered.
Roundcube Pre-Auth SQLi CVE-2026-48842 Exploited
CVE-2026-48842 Roundcube pre-auth SQLi confirmed exploited; TACACS+ protocol flaw threatens AAA; CISA adds WSO2 CVE-2026-5430 CVSS 9.8 to KEV.
GitLab CVSS 10.0 RCE - CVE-2026-85706 Patch Now
CVE-2026-85706 GitLab CVSS 10.0 path traversal enables unauthenticated RCE. Plus Cisco FMC zero-day exploited by Qilin and dual Check Point VPN 9.8s.
Windows IKE RCE Exploited - CVE-2026-65xxx in the Wild
CVE-2026-65xxx Windows IKE Extension RCE now exploited; Cl0p names 40+ Windchill victims; DOJ charges 17 Iranian Mabna Institute hackers.
GitLab Unauthenticated RCE - CVE-2026-19478 CVSS 9.4
CVE-2026-19478 GitLab GraphQL RCE hits CI/CD pipelines. Windows Task Host exploited by ransomware. City Forum scrapes 3.6M Azure records.
vCenter Zero-Day Drops Babuk Ransomware - CVE-2026-59310
CVE-2026-59310 vCenter RCE exploited by China-nexus APT for Babuk ransomware. Plus Clop claims GE and Philips, SAP Commerce Cloud hit in 3 days.
US Greenlights Private Hack-Backs - GeoServer Zero-Day
White House authorizes private hack-back ops against cybercrime gangs. GeoServer zero-day exploited with no patch. Shell loses 89GB to Clop exfiltration.
Edge Appliances Under Active Attack - KEV Adds Three
CISA adds Progress LoadMaster and SonicWall SMA1000 CVSS 10 to KEV; FBI warns of Gunra ransomware hitting FortiOS and Schneider Electric flaws.
TP-Link Omada ZTP Chain - 15 CVEs to Full Takeover
15 TP-Link Omada ZTP vulnerabilities chain into full network takeover. Talos analyzes AI-generated malware prompt logs.