Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update.
Any authenticated user who can push to a project can run it. The attacker commits a crafted Jupyter notebook and opens its commit diff, which leaks a heap
Source: The Hacker News
ANSI escape injection in MCP servers: Hidden from humans, visible to AI Source: Hacker News
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks Palo Alto Networks’ Unit 42 says a Chinese-speaking threat actor used DeepSeek through the open-source Hermes Agent framework to launch
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 144.76.19.72 — 463 requests (recent log) 34.16.177.216 — 288 requests (recent log) 93.123.109.10 — 216 requests (recent