Jake Knott

GitLab has patched a critical vulnerability, CVE-2026-19478, that could let unauthenticated attackers modify or delete public repositories via a single HTTP request, along with a high-risk CSRF flaw (…

Hackers are mass-exploiting two WordPress flaws, dubbed wp2shell, within hours of patches being shipped in versions 7.0.2 and 6.9.5, with an AI model used both to discover the chain and to weaponize i…