https://news.kyro9.comDeduplicated cyber-security news from 50+ sources.https://cyberscoop.com/us-water-system-cybersecurity-ai-threats-op-ed/Here’s what it would take: stronger defenses for large utilities, hands-on help for smaller systems and federal support to make both happen. The post The US needs a real plan to defend its water systems appeared first on CyberScoop . (via CyberScoop)Mon, 05 Oct 2026 10:00:00 +0000https://cyberscoop.com/us-water-system-cybersecurity-ai-threats-op-ed/https://www.helpnetsecurity.com/2026/10/05/makerphone-2-diy-4g-phone/CircuitMess, a Croatian electronics kit maker, is selling MAKERphone 2.0, a build-it-yourself 4G phone on Kickstarter that buyers program in MicroPython or Arduino C++ and extend with plug-in hardware. Insert a SIM and it makes real calls… (via Help Net Security)Mon, 05 Oct 2026 09:50:37 +0000https://www.helpnetsecurity.com/2026/10/05/makerphone-2-diy-4g-phone/https://www.reddit.com/r/netsec/comments/1wy4edi/wordpress_libheif_rce/submitted by /u/adrian_rt [link] [comments] (via Reddit r/netsec)Mon, 05 Oct 2026 09:46:02 +0000https://www.reddit.com/r/netsec/comments/1wy4edi/wordpress_libheif_rce/https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5124010-update-crashes-some-games-and-apps/Microsoft confirmed over the weekend that some games and applications using AC-3 (Dolby Digital) audio decoding will crash after installing the September 2026 KB5124010 Windows 11 preview update. [...] (via BleepingComputer)Mon, 05 Oct 2026 09:37:56 +0000https://www.bleepingcomputer.com/news/microsoft/microsoft-windows-kb5124010-update-crashes-some-games-and-apps/https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/Ofqual study finds growing number of UK schools are bouncing back “immediately” from cyber-attacks (via Infosecurity Magazine)Mon, 05 Oct 2026 09:30:00 +0000https://www.infosecurity-magazine.com/news/uk-schools-recovering-faster/https://www.scworld.com/podcast-segment/15206-state-of-the-ai-soc-regulating-ai-and-can-ai-agents-feel-pain-aqsa-taylor-esw-479 (via SC Media)Mon, 05 Oct 2026 09:00:00 +0000https://www.scworld.com/podcast-segment/15206-state-of-the-ai-soc-regulating-ai-and-can-ai-agents-feel-pain-aqsa-taylor-esw-479https://www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...] (via BleepingComputer)Mon, 05 Oct 2026 08:27:46 +0000https://www.bleepingcomputer.com/news/google/google-halts-open-source-bug-bounty-program-amid-ai-spam-surge/https://www.csoonline.com/article/4230243/should-the-ciso-role-be-split-in-two.htmlIn its roughly 30-year history, the CISO role has been reshaped by waves of new technology and rising cyber threats. In many organizations, CISOs now own risk reporting, information risk management, threat monitoring, cyber risk… (via CSO Online)Mon, 05 Oct 2026 08:25:00 +0000https://www.csoonline.com/article/4230243/should-the-ciso-role-be-split-in-two.htmlhttps://www.reddit.com/r/netsec/comments/1wy33ar/open_build_service_one_year_later_command/submitted by /u/SzLam__ [link] [comments] (via Reddit r/netsec)Mon, 05 Oct 2026 08:18:43 +0000https://www.reddit.com/r/netsec/comments/1wy33ar/open_build_service_one_year_later_command/https://www.helpnetsecurity.com/2026/10/05/macos-full-disk-access-updates/Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company… (via Help Net Security)Mon, 05 Oct 2026 08:11:17 +0000https://www.helpnetsecurity.com/2026/10/05/macos-full-disk-access-updates/https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.htmlA critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming… (via The Hacker News)Mon, 05 Oct 2026 08:09:23 +0000https://thehackernews.com/2026/10/attackers-target-rejetto-hfs-flaw-that.htmlhttps://www.helpnetsecurity.com/2026/10/05/doxx-net-agentic-defined-networking-platform/doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, which lets people and their agents create their own private, secure networks, communicate with no servers in the middle, and get started with no personal… (via Help Net Security)Mon, 05 Oct 2026 08:03:40 +0000https://www.helpnetsecurity.com/2026/10/05/doxx-net-agentic-defined-networking-platform/https://www.helpnetsecurity.com/2026/10/05/google-ai-generated-vulnerability-reports-pause/Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP), after a wave of invalid, AI-generated submissions swamped the engineers and open source maintainers who… (via Help Net Security)Mon, 05 Oct 2026 07:37:21 +0000https://www.helpnetsecurity.com/2026/10/05/google-ai-generated-vulnerability-reports-pause/https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/Known as Rey, the suspect is reportedly helping the FBI identify and locate other members of the extortion group. The post Alleged ShinyHunters Leader Arrested in Jordan appeared first on SecurityWeek . (via SecurityWeek)Mon, 05 Oct 2026 07:16:53 +0000https://www.securityweek.com/alleged-shinyhunters-leader-arrested-in-jordan/https://www.malwarebytes.com/blog/news/2026/10/a-week-in-security-september-28-october-4-2A list of topics we covered in the week of September 28 to October 4 of 2026 (via Malwarebytes Labs)Mon, 05 Oct 2026 07:01:00 +0000https://www.malwarebytes.com/blog/news/2026/10/a-week-in-security-september-28-october-4-2https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.htmlCitrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779, carries a CVSS… (via The Hacker News)Mon, 05 Oct 2026 06:40:19 +0000https://thehackernews.com/2026/10/new-netscaler-zero-day-exploited-in.htmlhttps://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first… (via SecurityWeek)Mon, 05 Oct 2026 05:14:48 +0000https://www.securityweek.com/exploitation-of-citrix-netscaler-zero-day-hits-appliances-patched-days-earlier/https://www.helpnetsecurity.com/2026/10/05/keyorix-open-source-on-premise-secrets-management/Keyorix is an open-source secrets manager that runs entirely on a company’s own servers. A secrets manager is the locked store where an application fetches the database passwords, API keys, and tokens it needs, so they stay out of config… (via Help Net Security)Mon, 05 Oct 2026 05:00:57 +0000https://www.helpnetsecurity.com/2026/10/05/keyorix-open-source-on-premise-secrets-management/https://www.helpnetsecurity.com/2026/10/05/remote-monitoring-and-management-rmm-abuse/Huntress found attackers using legitimate remote monitoring and management (RMM) software in 45% of the endpoint-related incidents it recorded in the first quarter of 2026. The security company also ranked 11 attack tactics by how often it… (via Help Net Security)Mon, 05 Oct 2026 04:30:08 +0000https://www.helpnetsecurity.com/2026/10/05/remote-monitoring-and-management-rmm-abuse/https://isc.sans.edu/diary/rss/33398 (via SANS Internet Storm Center)Mon, 05 Oct 2026 02:00:02 +0000https://isc.sans.edu/diary/rss/33398https://isc.sans.edu/diary/rss/33396For an experiment, I created a script [1] that parses and send the TTY logs collected from actors or bots activity that run various commands after they successfully login the DShield sensor. Those TTY logs are sent daily at the end of each… (via SANS Internet Storm Center)Mon, 05 Oct 2026 00:15:00 +0000https://isc.sans.edu/diary/rss/33396https://techcrunch.com/2026/10/04/google-froze-its-open-source-bug-bounty-program-due-to-a-significant-rise-in-ai-submissions/AI slop seems to be overwhelming bug bounty programs. (via TechCrunch (Security))Sun, 04 Oct 2026 20:31:07 +0000https://techcrunch.com/2026/10/04/google-froze-its-open-source-bug-bounty-program-due-to-a-significant-rise-in-ai-submissions/https://www.scworld.com/brief/scammers-increasingly-target-mobile-users-with-banking-fraudBanking scam fraudsters are increasingly focusing on mobile devices, with a 35% increase in such scams over the last 12 months. (via SC Media)Sun, 04 Oct 2026 18:13:43 +0000https://www.scworld.com/brief/scammers-increasingly-target-mobile-users-with-banking-fraudhttps://www.securityweek.com/trump-names-national-intelligence-director-jay-clayton-to-lead-a-new-federal-ai-task-force/The announcement comes after Trump hosted top executives of AI companies at the White House last week. The post Trump Names National Intelligence Director Jay Clayton to Lead a New Federal AI Task Force appeared first on SecurityWeek . (via SecurityWeek)Sun, 04 Oct 2026 14:57:25 +0000https://www.securityweek.com/trump-names-national-intelligence-director-jay-clayton-to-lead-a-new-federal-ai-task-force/https://www.troyhunt.com/weekly-update-524/I'm in Denmark! Well, just, I'm now at Copenhagen airport ready to begin the long trek home, with the final event at GOTO now done and going just perfectly. This week, there are two ShinyHunters arrests in the news: Pepijn in the… (via Troy Hunt)Sun, 04 Oct 2026 11:52:23 +0000https://www.troyhunt.com/weekly-update-524/https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-asks-claude-users-to-share-voice-data-for-ai-model-training/Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. [...] (via BleepingComputer)Sun, 04 Oct 2026 10:53:21 +0000https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-asks-claude-users-to-share-voice-data-for-ai-model-training/https://www.reddit.com/r/netsec/comments/1wxc5pb/how_to_hack_time_with_c2pa/submitted by /u/si9int [link] [comments] (via Reddit r/netsec)Sun, 04 Oct 2026 10:12:01 +0000https://www.reddit.com/r/netsec/comments/1wxc5pb/how_to_hack_time_with_c2pa/https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data A flaw in Titan, an internal Microsoft… (via Help Net Security)Sun, 04 Oct 2026 08:00:19 +0000https://www.helpnetsecurity.com/2026/10/04/week-in-review-researcher-breaks-into-microsoft-analytics-service-netscaler-rce-0-day-exploited/https://isc.sans.edu/diary/rss/33394Sometimes I have to smile, or my interest is triggered, when I review new User Agent Strings in the honeypot logs. (via SANS Internet Storm Center)Sun, 04 Oct 2026 07:58:51 +0000https://isc.sans.edu/diary/rss/33394https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.htmlA suspected member of the ShinyHunters digital extortion group, who goes by the online alias "Rey," has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar with the matter. Rey, whose real name… (via The Hacker News)Sun, 04 Oct 2026 07:22:05 +0000https://thehackernews.com/2026/10/shinyhunters-suspect-rey-reportedly.htmlhttps://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.htmlA new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations.… (via The Hacker News)Sun, 04 Oct 2026 07:20:32 +0000https://thehackernews.com/2026/10/china-aligned-ta419-targets-us-ai.htmlhttps://nvd.nist.gov/vuln/detail/CVE-2026-88779Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) contain an improper restriction of operations within the bounds of a memory buffer vulnerability that could allow for a denial of service. (via CISA Known Exploited Vulnerabilities)Sun, 04 Oct 2026 00:00:00 +0000https://nvd.nist.gov/vuln/detail/CVE-2026-88779https://www.bleepingcomputer.com/news/google/google-gemini-could-soon-get-full-access-to-your-macs-files-apps-and-the-web/Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...] (via BleepingComputer)Sat, 03 Oct 2026 23:12:34 +0000https://www.bleepingcomputer.com/news/google/google-gemini-could-soon-get-full-access-to-your-macs-files-apps-and-the-web/https://cyber.gc.ca/en/alerts-advisories/al26-024-critical-vulnerabilities-affecting-citrix-netscaler-adc-netscaler-gateway-cve-2026-88771-cve-2026-88772 (via Canadian Centre for Cyber Security)Sat, 03 Oct 2026 20:08:48 +0000https://cyber.gc.ca/en/alerts-advisories/al26-024-critical-vulnerabilities-affecting-citrix-netscaler-adc-netscaler-gateway-cve-2026-88771-cve-2026-88772https://techcrunch.com/2026/10/03/federal-judge-calls-flock-indiscriminate-mass-surveillance/A federal judge ruled that a sheriff’s deputy violated a woman’s Fourth Amendment rights when using Flock to search for her license plate without a warrant. (via TechCrunch (Security))Sat, 03 Oct 2026 19:33:15 +0000https://techcrunch.com/2026/10/03/federal-judge-calls-flock-indiscriminate-mass-surveillance/https://www.scworld.com/brief/researchers-bypass-ai-agent-protections-with-javascript-obfuscationSecurity researchers have successfully bypassed the prompt-injection protections of an AI agent named Manus, achieving code execution through a sophisticated obfuscation technique. (via SC Media)Sat, 03 Oct 2026 16:51:00 +0000https://www.scworld.com/brief/researchers-bypass-ai-agent-protections-with-javascript-obfuscationhttps://www.scworld.com/brief/microsoft-x-account-hijacked-for-crypto-scamUnknown attackers compromised the official Microsoft account on X, promoting a cryptocurrency token in what appeared to be a pump-and-dump scheme. (via SC Media)Sat, 03 Oct 2026 16:47:59 +0000https://www.scworld.com/brief/microsoft-x-account-hijacked-for-crypto-scamhttps://www.scworld.com/brief/new-linux-malware-mimics-network-edge-appliances-to-evade-detectionSophisticated malware developers are creating Linux implants that closely mimic Korean and Taiwanese network edge appliances, making them exceptionally difficult to detect. (via SC Media)Sat, 03 Oct 2026 16:46:08 +0000https://www.scworld.com/brief/new-linux-malware-mimics-network-edge-appliances-to-evade-detectionhttps://www.scworld.com/brief/epic-pauses-product-development-amid-cybersecurity-concernsEpic, the company behind the widely used MyChart patient portal, has temporarily halted most of its product development to address significant cybersecurity vulnerabilities discovered in its systems. (via SC Media)Sat, 03 Oct 2026 16:42:51 +0000https://www.scworld.com/brief/epic-pauses-product-development-amid-cybersecurity-concernshttps://www.scworld.com/brief/ai-agent-control-emerges-as-infrastructure-priority-amid-rapid-developmentControlling AI agents has become the next infrastructure priority, as the rapid integration of AI into enterprise operations continues. (via SC Media)Sat, 03 Oct 2026 16:42:34 +0000https://www.scworld.com/brief/ai-agent-control-emerges-as-infrastructure-priority-amid-rapid-developmenthttps://techcrunch.com/2026/10/03/openai-safety-employee-resigns-claiming-the-companys-culture-is-broken/By his own admission, David Robinson is “something of a cliché”: an employee at a leading AI company who issues a dire warning while resigning from their job. (via TechCrunch (Security))Sat, 03 Oct 2026 16:30:01 +0000https://techcrunch.com/2026/10/03/openai-safety-employee-resigns-claiming-the-companys-culture-is-broken/https://isc.sans.edu/diary/rss/33392YARA-X&#;x26;#;39;s 1.21.0 release brings 5 improvements and 4 bugfixes. (via SANS Internet Storm Center)Sat, 03 Oct 2026 14:40:21 +0000https://isc.sans.edu/diary/rss/33392https://thehackernews.com/2026/10/mi5-says-chinas-mss-funded-research.htmlThe U.K.'s domestic intelligence and security agency has warned that more than 100 academics have helped China boost its intelligence gathering efforts on behalf of Beijing's state security service. In a "Security Service Espionage Alert"… (via The Hacker News)Sat, 03 Oct 2026 14:38:46 +0000https://thehackernews.com/2026/10/mi5-says-chinas-mss-funded-research.htmlhttps://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.htmlThe suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The… (via The Hacker News)Sat, 03 Oct 2026 14:36:33 +0000https://thehackernews.com/2026/10/warlock-exploits-sharepoint-flaws-to.htmlhttps://www.bleepingcomputer.com/news/security/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people/The Technical University of Denmark (DTU) says information belonging to up to 200,000 users may have been exposed after hackers accessed its identity and access management system and downloaded a large amount of data. [...] (via BleepingComputer)Sat, 03 Oct 2026 14:35:20 +0000https://www.bleepingcomputer.com/news/security/danish-university-dtu-breach-exposes-data-of-up-to-200-000-people/https://hackread.com/dutch-institute-vulnerability-disclosure-breach-zammad-0-days/Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access. (via HackRead)Sat, 03 Oct 2026 12:00:04 +0000https://hackread.com/dutch-institute-vulnerability-disclosure-breach-zammad-0-days/https://www.securityweek.com/fortra-patches-critical-vulnerabilities-in-boks/The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek . (via SecurityWeek)Sat, 03 Oct 2026 11:34:00 +0000https://www.securityweek.com/fortra-patches-critical-vulnerabilities-in-boks/https://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.htmlFeaturing: Cybersecurity is being reshaped by the expansion of cloud infrastructure, AI, distributed systems, and increasingly complex digital environments. As organizations manage more identities, devices, data, and internet-facing… (via The Hacker News)Sat, 03 Oct 2026 11:00:00 +0000https://thehackernews.com/2026/10/the-state-of-cybersecurity-in-2026key.htmlhttps://www.reddit.com/r/netsec/comments/1wwgdom/rce_and_bad_crypto_in_internxts_postquantum_cloud/Internxt is a post-quantum secure encrypted cloud storage provider which is open-source and has passed multiple independent audits. I reviewed their code and found that post-quantum security should have been the least of their problems.… (via Reddit r/netsec)Sat, 03 Oct 2026 06:43:58 +0000https://www.reddit.com/r/netsec/comments/1wwgdom/rce_and_bad_crypto_in_internxts_postquantum_cloud/https://www.reddit.com/r/netsec/comments/1wwdm2f/a_peek_into_reddits_antispam_internals/submitted by /u/fagnerbrack [link] [comments] (via Reddit r/netsec)Sat, 03 Oct 2026 04:00:52 +0000https://www.reddit.com/r/netsec/comments/1wwdm2f/a_peek_into_reddits_antispam_internals/https://www.scworld.com/brief/cybersecurity-concerns-rise-for-physical-access-control-systemsCybersecurity is becoming a larger concern in physical access control, according to a new report from Mercury Security, an HID brand. (via SC Media)Fri, 02 Oct 2026 22:37:55 +0000https://www.scworld.com/brief/cybersecurity-concerns-rise-for-physical-access-control-systemshttps://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-eu-is-trying-to-fight-unregulated-squid-fishing.htmlThe EU is recommending import controls to combat unregulated squid fishing in the Southwest Atlantic. I’m not optimistic. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.… (via Schneier on Security)Fri, 02 Oct 2026 21:02:18 +0000https://www.schneier.com/blog/archives/2026/10/friday-squid-blogging-eu-is-trying-to-fight-unregulated-squid-fishing.htmlhttps://therecord.media/judge-dismisses-spyware-case-brought-by-salvadoran-journalistsThe plaintiffs, who all worked for the independent and Salvadoran news outlet El Faro, failed to convince the court that their case had jurisdiction in California, according to the judge’s order. (via The Record (Recorded Future))Fri, 02 Oct 2026 20:30:00 +0000https://therecord.media/judge-dismisses-spyware-case-brought-by-salvadoran-journalistshttps://therecord.media/alpr-legislation-hawley-sanders-merkley-aocRepublican Sen. Josh Hawley has new legislation on limiting automated license plate readers (ALPRs), while Democratic Sens. Bernie Sanders and Jeff Merkley, with Rep. Alexandria Ocasio-Cortez, have teed up a broader bill. (via The Record (Recorded Future))Fri, 02 Oct 2026 19:30:00 +0000https://therecord.media/alpr-legislation-hawley-sanders-merkley-aochttps://www.bleepingcomputer.com/news/security/frontline-education-data-breach-impacts-school-district-employees/Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security… (via BleepingComputer)Fri, 02 Oct 2026 19:01:40 +0000https://www.bleepingcomputer.com/news/security/frontline-education-data-breach-impacts-school-district-employees/https://www.bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/The China-linked ransomware group Warlock targeted a water utility, a telecom provider, a regional government body, and a university by exploiting SharePoint vulnerabilities to gain initial access. [...] (via BleepingComputer)Fri, 02 Oct 2026 18:33:01 +0000https://www.bleepingcomputer.com/news/security/warlock-ransomware-breach-sharepoint-in-water-telecom-operator-attacks/https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-995 (via Canadian Centre for Cyber Security)Fri, 02 Oct 2026 18:01:09 +0000https://cyber.gc.ca/en/alerts-advisories/control-systems-moxa-security-advisory-av26-995https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-994 (via Canadian Centre for Cyber Security)Fri, 02 Oct 2026 17:51:07 +0000https://cyber.gc.ca/en/alerts-advisories/gitlab-security-advisory-av26-994https://cyberscoop.com/ai-agent-hacks-legal-liability-cfaa/Experts and policymakers want AI companies to face consequences for agentic hacks. There may not be a clear-cut answer under existing laws and regulations. The post The legal questions raised by agentic AI hacks appeared first on… (via CyberScoop)Fri, 02 Oct 2026 17:47:54 +0000https://cyberscoop.com/ai-agent-hacks-legal-liability-cfaa/https://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.htmlA critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance… (via The Hacker News)Fri, 02 Oct 2026 17:33:31 +0000https://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.html