Topic

DevOps: news, advisories and analysis

5 articlesUpdated 21 Oct 2026

CyberSecureToday covers DevOps across 5 articles published between 11 Sep 2026 and 21 Oct 2026. The coverage includes 5 vulnerability advisories. 5 advisories are rated critical or high severity.

Stories on DevOps most often intersect with Cloud Security, Vulnerability and Singapore, with Technology, Cloud & SaaS the most affected sector. The most recent story, “SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads”, was published 21 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsCloud & SaaSHigh
SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads
SingCERT issues an urgent warning as the CARBONATO botnet actively scans Singapore cloud subnets, hijacking exposed unauthenticated Docker Remote APIs for container escapes.
Aisha Noor21 Oct 202613 min read
ThreatsCloud & SaaSHigh
Microsoft Azure CLI Command Injection Vulnerability CVE-2026-83948 Exposes Cloud CI/CD Automation Runners
Microsoft patches important command injection flaw CVE-2026-83948 in Azure CLI, requiring customer updates to prevent remote code execution in CI/CD pipelines.
Aisha Noor22 Sep 202614 min read
ThreatsCloud & SaaSHigh
OpenSearch Dashboards Route Handler Flaw Triggers Denial of Service Across Cloud Clusters
AWS and OpenSearch release security advisories for high-severity vulnerability CVE-2026-75897 in OpenSearch Dashboards enabling unauthenticated remote denial of service.
Priya Raman19 Sep 202610 min read
ThreatsCloud & SaaSCritical
GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins
GitLab pushed emergency patches for CVE-2026-85706, an unauthenticated CVSS 10.0 path traversal flaw in the repository commits API that allows remote file extraction.
Priya Raman12 Sep 20266 min read
ThreatsCloud & SaaSCritical
Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors
Wiz Research caught threat actors chaining two JFrog Artifactory flaws (CVE-2026-42018 & CVE-2026-42016) to forge admin tokens and compromise enterprise software repositories.
Aisha Noor11 Sep 20266 min read

Latest coverage

SingCERT Issues Critical Alert as CARBONATO Botnet Exploits Exposed Docker Remote APIs Across Cloud Workloads

Microsoft Azure CLI Command Injection Vulnerability CVE-2026-83948 Exposes Cloud CI/CD Automation Runners

OpenSearch Dashboards Route Handler Flaw Triggers Denial of Service Across Cloud Clusters

GitLab fixes maximum-severity CVSS 10.0 file-read flaw as in-the-wild exploitation begins

Attackers chain dual JFrog Artifactory vulnerabilities to hijack build pipelines and plant backdoors