CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed Pierluigi Paganini October 03, 2026 GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape…
Month: October 2026
Building for good: How civil society organizations are automating on Cloudflare
Tracking how governments target dissidents living in exile. Helping people in crisis find mental health support. Advocating for legislation that protects free expression online. These…
The EDR blind spot: 3 ways browser attacks evade endpoint telemetry
Article written by Andrius Buinovskis, VP of product strategy at NordLayer EDR remains necessary when attackers execute code on the host. The problem starts if…
Critical Dell Container Storage Flaws Let Unauthenticated Attackers Gain Full Administrative Control
Dell has released security update DSA-2026-448 to address multiple critical vulnerabilities in its Container Storage Modules, including flaws that could allow unauthenticated remote attackers to…
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure.…
AI agents keep access to company data after their work is done
IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according…
Why CISOs Struggle to Answer the Board’s Three Hardest Questions, and How to Fix the Report
The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner,…
Has the time arrived for the retail chief AI officer?
Back in February 2018, Computer Weekly asked the question, “What are the retail jobs that don’t exist yet?”. In the midst of rapid technological change…
AI Agents Aimed SQL Injection at US and Canadian Government Sites
AI agents appear to have attempted to hack a US Department of Education website and a Library and Archives Canada service while trying to access…
Antino backdoor uses your inbox as its control panel
Antino backdoor uses your inbox as its control panel Pierluigi Paganini October 03, 2026 Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor…
2026 Birthday week: network performance update
Cloudflare is now the fastest provider in 74% of the 1,000 largest networks around the world, up from 60% in April 2026. This huge improvement matters because…
Companies Push AI Use But Skip Training and Official Policy
Many employees are using AI at work without formal training. 43% of knowledge workers—office employees whose jobs center on information rather than manual work—say their…