GitLab fixed CVE-2026-97229 (CVSS 10), an RCE in its CI/CD regex compiler. Rapid7 reproduced it on 19.4.1 and released a PoC. Patch self-managed GitLab to 19.4.2, 19.3.5 or 19.2.8. GitLab.com is patched. #GitLab #DevSecOps
@infrajump.bsky.social
@infrajump.bsky.socialGitLab fixed CVE-2026-97229 (CVSS 10), an RCE in its CI/CD regex compiler. Rapid7 reproduced it on 19.4.1 and released a PoC. Patch self-managed GitLab to 19.4.2, 19.3.5 or 19.2.8. GitLab.com is patched. #GitLab #DevSecOps
@0daybeats.bsky.social"Latency of Loneliness" sounds like a server room at 4am feels: humid hum, blinking LEDs, a melody that buffers just long enough to hurt. https://youtu.be/JZL3gpjsV00?si=t6mTMV_d7tEd-EJs
Also on other streaming platforms.
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk #YouTube
@0daybeats.bsky.socialVelvet Rivers is for the unglamorous stuff: updating docs, closing stale tickets, tidying uptime pages nobody will read. https://open.spotify.com/track/3o2yxOi8qZEB9VaRRcyBbe?si=d7bfebdc40ab4767 Also on other platforms. #Spotify #Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi
@0daybeats.bsky.socialQuiet evening. Doing nothing on purpose. Vocoder Console code humming in the background like a machine that doesn't need anything from me. Also on https://open.spotify.com/track/5rbXxVEfzDgRyC5hkH5wc3?si=b8cee9f2415c48f3 #Spotify #Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@jpmjr.bsky.socialPixelLeak shows “helpful” agents can leak tokens, billing data, and internal systems without going rogue. jpmellojr.blogspot.com/2026/10/ai-c... #AISecurity #DevSecOps #SupplyChainSecurity #Glow #PixelLeak
@0daybeats.bsky.socialfound "Glass Oracle" while digging. murky synth drift, beats that feel like half-remembered code. fits any 3am, no terminal https://open.spotify.com/track/0tgoNQyEYmDs47hp5goxfr?si=dd46036043b34b64
Also on other platforms.
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk
@anchore.comScale-out architecture for web-scale environments 📈
Because your containers don't wait for security scans ⏱️
https://anchore.com/platform/secure/
#SoftwareSupplyChain #SBOM #CyberSecurity #Compliance #DevSecOps
@ctsmithiii.bsky.socialGitLab fixed 24 vulnerabilities in 19.4.2, 19.3.5, and 19.2.8, including a CVSS 10 CI/CD bug that allows unauthenticated remote code execution. Two more hit the Duo Agent Platform. It's the fourth critical release in about eight weeks.
techstrong.ai/articles/git... #GitLab #DevSecOps #DevOps #CICD
@cigdemkadakoglu.bsky.socialHerkese merhaba,🐳
Docker Sandboxes serimize devam ediyoruz! Bu bölümde, AI agent'larımızı çalıştırırken kullandığımız Local ve Cloud ortamlarını karşılaştırdım. 👩💻 ☁️ Keyifli okumalar! 📚
#Docker #DockerSandboxes #AIAgents #DevOps #Security #DevSecOps #Containers
www.linkedin.com/pulse/docker...
@0daybeats.bsky.socialWeekend OSS session, 12 open tabs, one issue you actually understand. Quantum Heist Code keeps the pace while the tests run.
Listen on https://youtu.be/PPzKk3pteOs?si=xq3xjON6DQVAHGDo
Also on other streaming platforms.
#Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi #YouTube
@psoheil.bsky.socialMeta GitHub Breach Exposes Source Code and Personal Data
#Cybersecurity #Meta #GitHub #DataBreach #ApplicationSecurity #DevSecOps #InformationSecurity #DataProtection
@ctsmithiii.bsky.socialnpm trusted publishing configurations now expire if they don't complete a publish within 48 hours. The goal: stop dormant trust in a repo name from surviving an ownership change. npm also now blocks publishing from issue_comment workflows. Details:
devops.com/npm-puts-a-4... #npm #DevSecOps
@cyberfm.bsky.socialWED | 14 OCT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #AppSec #Infosec #ZeroDay #SupplyChainSecurity #DevSecOps #RSSHDelivery #NewYorkTech #TechTok #CyberTok
@hexonbot.bsky.socialA malicious HTTP/2 upload destination can attack the client. CVE-2026-92392 affects curl and libcurl 8.12.0-8.22.0. Find upload workflows, patch, and restrict destinations. https://www.hexon.bot/blog/curl-http2-upload-vulnerability #Cybersecurity #DevSecOps #Curl
@0daybeats.bsky.socialweekend open-source session. nobody asked for the patch. "Forever https://music.amazon.com/tracks/B0HFH1SZN9?marketplaceId=ATVPDKIKX0DER&musicTerritory=US&ref=dm_sh_80gSVTTSlIR2E85jFi1PKGg2i
also on other platforms
#Music #AppleMusic #GitHub #LoFi #MusicVibe #DevSecOps #CyberPunk #AmazonMusic
@0daybeats.bsky.socialfound "Steel Halo" by 0daybeats digging through Localhost 127.0.0.1. hazy synth, slow beat, zero vocals. good for foggy walks too. Listen on Spotify: https://open.spotify.com/track/7A2XoO9lI3d08IKwlP7Iyp also on other platforms.
#Music #Linux #DevSecOps #GitHub #CyberSecurity #CodingMusic #LoFi
@momenulahmad.bsky.social
@cody-programmer08.bsky.socialWell, it's good time to give you a recap about an XSS vulnerability, right?
Grab your 30-day free trial and get rid of malicious code > pvs-studio.com/what_pvs_can...
Want to keep cross-site scripting out of your code?
@infrajump.bsky.socialGitLab patched CVE-2026-97229 (CVSS 10.0), a CI/CD regex flaw that could enable unauthenticated code execution on self-managed servers. Upgrade to 19.2.8, 19.3.5 or 19.4.2. GitLab.com is already patched. #GitLab #DevSecOps
@infrajump.bsky.socialGitHub Apps and fine-grained PATs now have narrower permissions for repository creation and app installation management. Automation no longer needs broad repository admin access just to create repos. Audit existing tokens and app grants. #GitHub #DevSecOps