A maximum-severity GitLab vulnerability is being actively exploited by threat actors to access sensitive configuration files and secrets, risking software supply chain compromises.
CISA has warned that hackers are actively exploiting a maximum-severity GitLab vulnerability that allows unauthenticated attackers to steal credentials and secrets.
Threat actors are actively exploiting a critical path traversal vulnerability in GitLab, allowing unauthenticated users to access arbitrary files on affected servers.
Threat actors are chaining three high-severity JFrog Artifactory vulnerabilities to escalate privileges and deploy malicious plugins for continuous access.
ConnectWise has released an urgent patch for a critical ScreenConnect vulnerability that allows unauthorised file execution during active remote sessions.
