MUST READ

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

 | 

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

 | 

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

 | 

AI Agents Attempt SQL Injection While Searching Government Data

 | 

Investigators trace an AI agent 's path from research task to reconnaissance

 | 

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

 | 

Operation KillSwitch: Police Dismantle KillSec Ransomware Group

 | 

Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first

 | 

Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

 | 

U.S. CISA adds Cisco Catalyst SD-WAN Manager flaw to its Known Exploited Vulnerabilities catalog

 | 

AI Agent Chains Zammad Zero-Days To Take Over DIVD Systems in Seconds

 | 

WatchGuard fixes critical Fireware OS flaw allowing remote code execution

 | 

Oxygen Forensics, A Russian-run forensics firm spent a decade inside European police departments

 | 

Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT

 | 

U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog

 | 

WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign

 | 

Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches

 | 

Three Million Affected in Pentagon Personnel Agency Data Breach

 | 

Apple Patches CoreGraphics Zero-Day Linked to Sophisticated Targeted Attacks

 | 

24-Year-Old Arrested in Dutch Investigation Into ShinyHunters

 | 

AI Gateway

Pierluigi Paganini October 03, 2026
CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970 (CVSS score of 9.9), that could allow an authenticated user with access to the Duo Agent Platform to […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

Hacking / October 03, 2026

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

APT / October 03, 2026

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

Security / October 02, 2026

AI Agents Attempt SQL Injection While Searching Government Data

Artificial Intelligence / October 02, 2026

Investigators trace an AI agent 's path from research task to reconnaissance

Artificial Intelligence / October 02, 2026