Vulnerabilities
GitLab CVSS 10 Regex RCE on CISA KEV After Alpine Attack
CISA's KEV now lists a CVSS 10 GitLab RCE hiding in Ruby's regex engine — and Alpine's near-miss shows why upgrading GitLab alone may not fix it.
cisa kev
CyberROI coverage tagged “cisa kev”.
Vulnerabilities
ShinyHunters' PeopleSoft Zero-Day Was Three Chained Flaws
The Oracle PeopleSoft bug ShinyHunters exploited for five months is three chained flaws under one CVE. Does a single-identifier patch tell you you're covered?
Vulnerabilities
CISA: Arista VeloCloud Orchestrator SQLi Under Active Attack
CISA confirms active exploitation of a SQL injection flaw in on-prem Arista VeloCloud Orchestrator; federal agencies must remediate by October 26.