View Ridge Security
Back to Cyber Hose

CISA: Hackers now exploit max severity GitLab flaw in attacks

CISA warns of active exploitation of a max-severity GitLab flaw, plus AsyncRAT injection techniques and multiple IoT and media library CVEs.

πŸ•΅οΈ RESEARCH & DEEP DIVES

  • CISA: Hackers now exploit max severity GitLab flaw in attacks β€” BleepingComputer

  • Joomla Extension - regularlabs.com - Privileged stored XSS via link option in... β€” CVE ThreatInt

  • Joomla Extension - regularlabs.com - Privileged stored XSS via event handler ... β€” CVE ThreatInt

  • Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias opt... β€” CVE ThreatInt

  • Joomla Extension - regularlabs.com - Database data disclosure in Advanced Mod... β€” CVE ThreatInt

  • Tenda W20E HTTP formIPMacBindAdd stack-based overflowA vulnerability was iden... β€” CVE ThreatInt

  • Buffer overflow vulnerability in Panasonic Industry USB Driver for MINAS A5/A... β€” CVE ThreatInt

  • GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after freeA vulner... β€” CVE ThreatInt

  • GPAC MP4Box loader_bt.c gf_bt_report memory corruptionA vulnerability was fou... β€” CVE ThreatInt

  • GPAC MP4Box lsr_dec.c lsr_exec_command_list assertionA vulnerability has been... β€” CVE ThreatInt

  • GPAC MP4Box base_scenegraph.c gf_node_unregister assertionA vulnerability was... β€” CVE ThreatInt

  • Hackers Abuse AutoIt to Inject AsyncRAT Into Microsoft-Signed Windows Process β€” Cyber Security News

  • D-Link DIR-823G HNAP1 Stack Buffer Overflow (CVE-2026-90680) β€” thehackerwire.com (discovered)

  • Minha conta da microsoft foi hackeada e nΓ£o consigo recuperar β€” r/cybersecurity

  • CrowdStrike Identity Protection – Are the β€œAttack Paths” actually useful? β€” r/cybersecurity

Need help assessing your exposure?

Start with the free Posture Self-Check to see where you stand against the current threat landscape.

Free Posture Self-Check