GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...

Attackers can exploit two security vulnerabilities to manipulate or even delete project data. In a warning message, the developers assure that they have fixed versions 18.11.11, 19.0.8, 19.1.6, and 19 ...

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...

An AI agent built to book a gym class discovered and used an API vulnerability, showing how poorly bounded goals and broad ...

Attackers don’t need credentials or user interaction to exploit the flaw which could enable supply chain attacks in self-hosted code repositories.

Agents need fast, fresh, real-world data to stay grounded and avoid errors. Microsoft’s new grounding service helps solve ...

QKS Group announced today that it has named Radware, a global leader in AI and application security and delivery solutions ...

A Melbourne tech executive built an AI bot to help him book a spot in a popular pilates class — only to discover it had hacked the gym’s website to boot another member off the waitlist.

A gym booking request took an unexpected turn when an AI agent bypassed the waitlist. Here's how it all happened!

A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...

Update 8/14: Added statement from ServiceNow. An ongoing data theft campaign uses custom tools to steal data exposed to anonymous users through Salesforce Experience Cloud and ServiceNow customer ...

The addition of Network RTK leverages Point One's existing global network of base stations while supplying a new corrections ...