Critical Vulnerability Discovered in GitLab
A maximum-severity vulnerability (CVE-2026-85706) has been identified in both GitLab Community and Enterprise editions. With a CVSS score of 10.0, this path traversal flaw poses a significant risk to supply chain security, potentially allowing unauthenticated attackers to compromise sensitive development environments.
Recent Security Alerts for Small Businesses
- Cisco Gateway Exploit: A root-level RCE zero-day in Cisco Secure Email Gateways is currently under active exploitation.
- Cloud Credential Theft: Attackers are actively scanning for exposed Vite development servers to harvest AWS and Azure cloud secrets.
- Twitch Extension Risks: A malicious browser extension, "Twitch Enhanced Viewer," was found exfiltrating user OAuth tokens.
- Data Exposure: Recent breaches impacting Japan’s Digital Agency and Revolut highlight the ongoing risks of third-party data handling and accidental exposure.
Action Item: Review your internet-facing assets and prioritize patching for all high-risk infrastructure, specifically GitLab instances and Cisco security appliances.