Rubrika: Aktuálně

The private email address GitLab gives you for filing issues by email is a credential. Anyone who gets it can email a patch that GitLab commits in your name, to any branch you can push to, including main, and can start CI/CD jobs that run as you. GitLab shows each user this address behind a…

Read More “A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You” »

A financially motivated threat actor is using open-source AI agent frameworks to attack hundreds of online retailers at scale, stealing more than 600,000 credit card records. […]

Two MikroTik RouterOS SSH vulnerabilities chained together let attackers take full administrative control of Internet-exposed routers without a password, SSH key, or completed authentication. The chain, which CERT Polska calls MikroTrick, combines an SSH state-machine flaw (CVE-2026-67279) with an argument-injection bug in the RouterOS login process (CVE-2026-86060). Attack logs date to at

Attackers are increasingly targeting the management systems used to control enterprise infrastructure, with several critical vulnerabilities actively exploited before or shortly after vendors disclosed them. […]

Odbory francouzské veřejnoprávní televize vyzvaly zaměstnance, aby ve středu od 14.00 do 23.59 hodin přerušili práci. Protestují proti dalšímu snižování rozpočtu. Stávka může narušit vysílání zpravodajské stanice FranceInfo nebo hlavního večerního zpravodajství na stanici France 2, její skutečný rozsah však předem není znám. Zde je zdroj