The Hacker News

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including ...
blog.csdn

SourceTree配置SSH密钥：从生成到GitLab/GitHub克隆的完整指南

本内容遵循CC 4.0 BY-SA版权协议 帮不少团队解决过“代码拉不下来”的问题，十次里有八次是SSH密钥没配对。今天我把这套流程 ...
blog.csdn

GitLab团队协作入门：组、项目、成员权限与分支合并全流程

本内容遵循CC 4.0 BY-SA版权协议 上次帮一个五人小团队把散落在共享目录里的代码搬到 GitLab，我做的第一件事不是建仓库，而是先建了一个组。对方当时不太理解，觉得把项目挂在自己账号下面 ...
Scientific American magazine

How apple detectives solved the mystery of an ancient tree—and rewrote the history of fruit

It was a routine day in the laboratory belonging to Cameron Peace on the campus of Washington State University, Pullman, in the high, dry hills close to the Idaho border. Peace is a tree-fruit ...
CSOonline

A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove

The vulnerability impacts self-managed CE and EE instances and provides an unauthenticated path to arbitrary file reads. It’s already being probed in the wild. Yet another security vulnerability has ...
Dark Reading

Maximum Severity GitLab Flaw Puts Supply Chains at Risk

Threat actors are exploiting a maximum-severity GitLab vulnerability disclosed last week, which could give adversaries an inside track into organizations' software supply chains. CVE-2026-85706, which ...
theregister

Perfect-10 GitLab bug under attack days after patch lands

CISA says attackers are exploiting a maximum-severity GitLab flaw that lets unauthenticated miscreants read arbitrary files from vulnerable servers after the code shack released fixes on September 10.
cybersecuritydive

Malicious actors already using critical GitLab flaw, CISA and others warn

Hackers have begun exploiting a serious vulnerability in a popular software development tool, the Cybersecurity and Infrastructure Security Agency is warning. CISA on Friday listed the vulnerability ...
Infosecurity-magazine.com

Hackers Exploit Maximum Severity Flaw in GitLab

GitLab users are being urged to patch a maximum severity vulnerability in the platform after reports of “in-the-wild” exploitation. CVE-2026-85706 is described as an “improper limitation of a pathname ...
BleepingComputer

CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. GitLab's DevSecOps platform is used by over ...
bankinfosecurity

In-the-Wild Attacks Hit Popular DevSecOps Platform GitLab

Popular DevSecOps platform GitLab is being actively targeted by hackers attempting to exploit a recently patched, critical path traversal vulnerability. See Also: Cut SIEM Costs by Simplifying Your ...
securityaffairs

GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours

CVE-2026-85706, a CVSS 10.0 GitLab path traversal, was under active exploitation within 24 hours of disclosure. GitLab disclosed CVE-2026-85706 (CVSS score of 10.0) on September 10, 2026, a path ...