Tech Times on MSN

GitLab emergency patch: Third GraphQL flaw of 2026 lets unauthenticated attackers delete projects

GitLab vulnerability CVE-2026-19478 carries a CVSS 9.4 rating, letting unauthenticated attackers remotely delete or modify public projects with no login required. An emergency patch released August 17 ...
Cybernews

Critical GitLab flaw lets hackers delete or rewrite repositories – now exploited in wild

A critical GitLab flaw lets unauthenticated hackers modify or delete public projects and user data via GraphQL, prompting an ...
SecurityWeek

Critical GitLab Flaw Exploited Shortly After Disclosure

Hackers started exploiting CVE-2026-19478, a critical, unauthenticated GitLab vulnerability, shortly after public disclosure.
Dark Reading

Critical GitLab Zero-Click Flaw Poses Mitigation Challenges

A lack of technical details could make it hard for organizations running self-managed GitLab versions to detect potential ...
thenextweb.com

GitLab now automatically warns against merging API keys into your codebase

GitLab, the hugely popular devops platform, today announced the introduction of secrets detection with version 11.9 of the service. This means that should someone inadvertently include an API key or ...

GitLab Scales Agentic AI Across Trusted Software Delivery Workflows

GitLab Dedicated AI Gateway, now generally available, brings agentic AI to regulated and data-sensitive enterprises, letting ...

Attack attempts on GitLab vulnerability observed

Attacks on a recently unplanned closed vulnerability in GitLab have been observed. Attackers can, for example, delete ...

GitLab 19.3 Release Adds Updates for Scaling Agentic Software Development

GitLab Inc., the intelligent orchestration platform for DevSecOps, has announced updates that give enterprises more control ...