4 casos · pág. 1/1
CISA added one vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog on 2026-09-11 based on evidence of active exploitation: CVE-2026-85706, a path traversal vulnerability in GitLab Community Edition (CE) and Enterprise Edition (EE). CISA describes this vulnerability type as a frequent attack vector for malicious cyber actors…
Cloudflare reports that the average cost of its internal AI code reviewer rose from $1.19 (April) to about $2.46 (end of August 2026), then fell to $0.77 per review after a cost-optimization effort starting in mid-September. Median review time dropped from 4m 09s to 1m 32s. Roughly 40% of the savings came from code changes and the rest fr…
An actor using the handle 0xRune claims to have uploaded roughly 20 GB of data belonging to Cast AI, described as a multi-cloud, multi-region infrastructure backup and development environment. The listing references AWS Lambda deployment packages, S3 backups, infrastructure-state data, billing exports and a GitLab backup dated October 5, …
GhostAction has returned with an expanded credential-theft operation. By October 9, 2026, attackers had injected malicious GitHub Actions workflows into 790 repositories, according to OpenSourceMalware's validated total. The campaign was first documented by GitGuardian in 2025 (817 repositories, 3,325 stolen secrets). It relies on comprom…
