GitLab Patches Code Execution, Information Disclosure Vulnerabilities
GitLab has rolled out Community Edition (CE) and Enterprise Edition (EE) security updates that resolve 13 vulnerabilities, including three high-severity bugs. The most severe is…
Month: June 2026
Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet
Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet Pierluigi Paganini June 25, 2026 Curl fixed 18 vulnerabilities, including a 25-year-old bug, with…
Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract
Russian authorities used Cellebrite phone-cracking technology to break into a device belonging to a prominent domestic human rights activist they arrested and imprisoned, despite the…
Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances
Cyberespionage has remained a constant feature of Russia’s war against Ukraine. ESET Research has long tracked Gamaredon, one of the most active Russia-aligned advanced persistent…
GitHub Actions hardens checkout security to block ‘pwn request’ attacks
Blind spot If there’s a criticism that can be levelled at GitHub over this, it’s that it has taken so long to address a weakness…
Trivy Compromised by “TeamPCP” | Wiz Blog
Update March 23, 17:40 UTC: Wiz Research has identified a parallel compromise of kics-github-action On March 19, 2026, threat actors compromised Aqua Security’s Trivy vulnerability…
Why Your Organization Needs ISPM
Microsoft 365 gaps rarely announce themselves. Risk builds quietly in the background. An admin account accumulates more access than it needs. A Conditional Access policy…
Anthropic is testing desktop-like Claude Cowork for mobile
Anthropic appears to be testing Claude Cowork support on mobile, allowing you to manage long-running Claude tasks from your phone. For those unaware, Claude Cowork is Anthropic’s…
Windows Secure Boot Certificate Expired — Billions of PCs Affected Including Linux Distros
The clock has run out. As of June 24, 2026, the first of Microsoft’s original Secure Boot certificates, the Microsoft Corporation KEK CA 2011, has officially expired,…
NSA Urges Cyberthreat Timeline Has Compressed From Years to Months
On June 22, 2026, the National Security Agency (NSA) issued an urgent, coordinated warning alongside its international Five Eyes intelligence allies, comprising the cybersecurity authorities…
Agentic SOC Vendors – IT Security Guru
More than 100 vendors now position themselves as AI SOC platforms, but the category didn’t even exist 18 months ago. The Cloud Security Alliance…
Gemini 3.5 Flash Now Supports Agentic Computer Use for Enterprise Automation Tasks
Google has announced a significant enhancement to its AI platform with the release of Gemini 3.5 Flash, which now includes native support for agentic computer…