GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. “GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server viaRead More »GitLab Patches CVSS 10.0 Flaw That Could Let Unauthenticated Users Run Server Code

Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under theRead More »Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies

Some meetings last longer than it took attackers to jump on a newly disclosed security flaw this week. Within hours, they were already testing it. That’s not much time to read the warning, let alone do something about it. But speed is only part of the problem. A secure connectionRead More »⚡ Weekly Recap: Helpdesk 0-Days, Rogue Certs, ShinyHunters Arrest, AI-Fooling Malware and More

Cybercriminals claimed a breach, but no samples have been shared. 

Small businesses are building AI faster than they can govern it. 

Fashion retailer H&M Group is investigating claims that it was breached.