DevOps

2 articles

ThreatsTechnology, Cloud & SaaSBreaking
GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins
GitLab pushed emergency patches for CVE-2026-85706, an unauthenticated CVSS 10.0 path traversal flaw in the repository commits API that allows remote file extraction.
Priya Raman12 Sep 2026, 13:30 IST6 min read
ThreatsTechnology, Cloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 2026, 22:00 IST6 min read