The Wire

FILEDMI5 Says China’s MSS Funded Research Involving More Than 100 U.K.-Linked Academics CRITICALWarlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware FILEDAndroid 17 Advanced Protection Blocks Unverified Apps From Accessibility Services FILEDPolice Disrupt KillSec Ransomware Group and Arrest Suspected 16-Year-Old Operator CRITICALApple CoreGraphics Zero-Day PoC Emerges as WhatsApp PDF Checks Raise Delivery Questions FILEDAttackers Abuse ChatGPT Custom GPTs to Deliver RAT Malware via ClickFix FILEDStar Blizzard Targets 100+ Organizations With Fake Event Invites and CosmicPulse Backdoor CRITICALKiteworks Fixes Critical Vulnerability Discovered During Emergency Shutdown FILEDMI5 Says China’s MSS Funded Research Involving More Than 100 U.K.-Linked Academics CRITICALWarlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware FILEDAndroid 17 Advanced Protection Blocks Unverified Apps From Accessibility Services FILEDPolice Disrupt KillSec Ransomware Group and Arrest Suspected 16-Year-Old Operator CRITICALApple CoreGraphics Zero-Day PoC Emerges as WhatsApp PDF Checks Raise Delivery Questions FILEDAttackers Abuse ChatGPT Custom GPTs to Deliver RAT Malware via ClickFix FILEDStar Blizzard Targets 100+ Organizations With Fake Event Invites and CosmicPulse Backdoor CRITICALKiteworks Fixes Critical Vulnerability Discovered During Emergency Shutdown

Tag

DevOps Security

Every report filed under this tag.

Vulnerabilities

Leaked GitLab Issue Email Address Can Let Attackers Push Code and Run CI Jobs

A leaked GitLab incoming email address can let attackers impersonate users, push code to permitted branches and trigger CI/CD pipelines without passing normal 2FA or IP restrictions.

Zentrya One Desk 26 Sept 2026 3 min read

The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.