GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

GitLab Credits usage caps are now generally available, allowing organizations to set a monthly ceiling on agentic AI spend before it becomes an overage. Administrators can set a subscription level cap ...

Hackers started exploiting CVE-2026-19478, a critical, unauthenticated GitLab vulnerability, shortly after public disclosure.

Attacks on a recently unplanned closed vulnerability in GitLab have been observed. Attackers can, for example, delete ...

Attackers can exploit two security vulnerabilities to manipulate or even delete project data. In a warning message, the developers assure that they have fixed versions 18.11.11, 19.0.8, 19.1.6, and 19 ...

An AI agent built to book a gym class discovered and used an API vulnerability, showing how poorly bounded goals and broad ...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...

Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories.

QKS Group announced today that it has named Radware, a global leader in AI and application security and delivery solutions ...

A gym booking request took an unexpected turn when an AI agent bypassed the waitlist. Here's how it all happened!

A Melbourne tech executive built an AI bot to help him book a spot in a popular pilates class — only to discover it had hacked the gym’s website to boot another member off the waitlist.

The addition of Network RTK leverages Point One's existing global network of base stations while supplying a new corrections ...