GitLab patched CVE-2026-97229 (CVSS 10.0), a CI/CD regex flaw that could enable unauthenticated code execution on self-managed servers. Upgrade to 19.2.8, 19.3.5 or 19.4.2. GitLab.com is already patched. #GitLab #DevSecOps
@infrajump.bsky.social
@infrajump.bsky.socialGitLab patched CVE-2026-97229 (CVSS 10.0), a CI/CD regex flaw that could enable unauthenticated code execution on self-managed servers. Upgrade to 19.2.8, 19.3.5 or 19.4.2. GitLab.com is already patched. #GitLab #DevSecOps
@infrajump.bsky.socialGitHub Apps and fine-grained PATs now have narrower permissions for repository creation and app installation management. Automation no longer needs broad repository admin access just to create repos. Audit existing tokens and app grants. #GitHub #DevSecOps
@securityonline.bsky.socialTechnical details and PoC exploit code for CVE-2026-97229, a CVSS 10.0 GitLab RCE vulnerability exposing 25,766 hosts, are now public. Patch to 19.4.2 now.
#CVE202697229 #GitLab #RCE #DevSecOps #Cybersecurity #InfoSec #Vulnerability
@securityonline.bsky.socialA GitLab critical vulnerability, CVE-2026-97229, allows unauthenticated code execution. Update to 19.2.8, 19.3.5, or 19.4.2 now.
#GitLab #CVE202697229 #RCE #CICD #DevSecOps #Vulnerability #PatchNow #GitLabDuo
@cvedatabase.bsky.socialSecurity Tip: Don't wait for a production breach to find vulnerable libraries. 🛡️ Integrate automated scanning into your CI/CD pipeline to catch CVEs during development. Stay informed on the latest threats at https://cvedatabase.com #CVE #CyberSecurity #DevSecOps
@opsmatters.comThe latest update for #GitProtect includes "GitProtect 2.5.0: Lightweight Replication, Microsoft Graph API Support, and Enhanced Restores" and "How to Automate Repository Backups to Minimize Data Loss and Downtime".
#cybersecurity #Backup #DevOps #DevSecOps https://opsmtrs.com/3TszuS2
@thedailytechfeed.comDocker PAT flaw let attackers pose as users and push images until patched Sept 30. #Security #Docker #ImageSecurity #SupplyChain #Vulnerability #DevSecOps #PAT #TokenSecurity thedailytechfeed.com/docker-hub-f...
@inferlume.bsky.socialActive zero days in Citrix NetScaler & Ivanti Connect Secure enable unauthenticated root hijacking and internal tunneling as attackers harvest Active Directory credentials. Explore our complete technical brief.
@cyberlensai.bsky.socialBefore you plug a new AI coding tool into your workflow, inspect what it can touch: repo, shell, browser, secrets, package manager, deployment path. The permission model matters more than the demo. #AISecurity #DevSecOps
@thedailytechfeed.comnpm’s SlugFest lets attackers hijack package names via GitHub slugs. #npm #TrustedPublishing #SlugFest #SupplyChain #OIDC #DevSecOps https://thedailytechfeed.com/slugfest-npms-trusted-publishing-glitch-exposes-1500-packages/
@hightalk-me.bsky.socialGitHub’s Oct. 12 Dependabot update adds Anonymous authentication for organization-level registries that need no credentials. HighTalk’s view: make authentication match actual access, while keeping registry access decisions explicit. #Dependabot #DevSecOps
@ahmandonk.bsky.socialđź“° GitLab Peringatkan Celah RCE Kritis CVE-2026-97229 dengan Skor CVSS 10.0, Pengguna Diminta Segera Update
👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/10/13/gitlab-cve-2026-97229-celah-rce-kritis-cvss-10/
#cve #cybersecurity #devsecops #gitlab #hacker #keamananSiber #rce #remo
@cyberlensai.bsky.socialAgent builders: what is your rule for deciding whether a third-party skill/tool is safe enough to install? #AIAgents #DevSecOps
@tracyragan.bsky.socialAt #SecureChainCon Vannesa Toves, {(urn:li:organization:960262)[Druva]} taught us about Strengthening #AIcyberresilience for #MicrosoftCloud data. She did an amazing deep dive, giving we #DevSecOps types a better understanding of the data breach problem. Check it out at https://cstu.io/957af6
@orteliusos.bsky.socialAt #SecureChainCon Vannesa Toves, {(urn:li:organization:960262)[Druva]} taught us about Strengthening #AIcyberresilience for #MicrosoftCloud data. She did an amazing deep dive, giving we #DevSecOps types a better understanding of the data breach problem. Check it out at https://cstu.io/957af6
@inferlume.bsky.socialCritical vulnerabilities in Gitea and Bricksforge WordPress plugins face active exploitation as CyberXero deploys autonomous AI agents and P7 DarkSword raids iOS keychains. Explore our full technical brief.
@secdoc.bsky.socialThe Architecture Review Must End with a Decision secdoc.tech/the-architec...
#security-architecture #architecture-review #governance #decision-records #devsecops #open-source #cybersecurity #CAH2 #packt
@securityonline.bsky.socialSuspected TraderTraitor hackers used a trojanized Terraform provider to drop FLATROOF and ROOFDECK malware on macOS, Linux, and Windows.
#TraderTraitor #Terraform #SupplyChainAttack #FLATROOF #ROOFDECK #NorthKorea #DevSecOps #Cybersecurity
@securityonline.bsky.socialA GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.
#GitLab #CVE202697229 #ArbitraryCodeExecution #CICD #DevSecOps #PatchNow #CyberSecurity
@cyberlensai.bsky.socialYour SAST tool flags a medium-severity issue. The code is behind a VPN. Do you ticket it or drop it? #cybersecurity #devsecops