Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 67BleepingComputer · 178CERT Polska · 78Cisco Talos · 48CrowdStrike · 33Dark Reading · 73DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 56Security.NL · 315SecurityWeek · 81SentinelOne · 33The Cyber Express · 70TheCyberThrone · 58The Hacker News · 310The Record · 47Unit 42 · 46
Rapid78 d ago

CVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLab

OverviewOn October 12, 2026, GitLab published a critical patch release for CVE-2026-97229, an integer overflow or wraparound (CWE-190) in the CI/CD regular expression compiler affecting GitLab Community Edition (CE) and Enterprise Edition (EE). GitLab assigned the vulnerability a CVSSv3.1 score of 10.0. Under certain conditions, a remote attacker can execute arbitrary code on an affected GitLab server through a specially crafted regular expression stored in a malicious CI/CD configuration. While the vendor supplied CVSS score indicates that exploitation is fully unauthenticated, in reproducing

Related Companies
G
gitlab logo
gitlab
İlgili CVE'ler
CVE-2026-97229
Read at the source
The Hacker News8 d ago

LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network

Three vulnerabilities in LG's webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12. The chain was tested on two TV models, the 32LQ636BPSA and the 27TQ600SW, running webOS 7.5.7-25 on firmware

Related Companies
T
tinacms logo
tinacms
F
forkhq logo
forkhq
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News8 d ago

Product Walkthrough: Bitdefender AI Visibility and Control

A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data

Related Companies
B
bitdefender logo
bitdefender
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source

441-450 / 1669 news items shown