GitLab has issued a critical security alert regarding a severe vulnerability in its GitLab Community and Enterprise editions, potentially allowing attackers to execute pipeline jobs as other users. With over 30 million registered users and adoption by more than 50% of Fortune 100 companies, including T-Mobile, Goldman Sachs, Airbus, Lockheed Martin, Nvidia, and UBS, this […]
Microsoft’s July security update reveals significant vulnerabilities, with attackers already exploiting flaws in the system. The update addresses a staggering 139 CVEs in Microsoft products and four in non-Microsoft products. The July update necessitates prompt action from administrators, given the patching requirements for 139 unique CVEs. Among these, two are actively exploited by attackers, and […]
CocoaPods, a widely-used dependency manager for iOS and macOS applications, has been found to harbor three critical vulnerabilities, exposing almost all Apple devices to potential supply chain attacks. These vulnerabilities, which went unnoticed for nearly a decade, could have allowed attackers to inject malware into apps. Discovered by cybersecurity experts at EVA Information Security, these […]