Urgent.News

What's breaking now, across thousands of outlets.

Saturday, 12 September 2026 Reading Room

Tech

GitLab issues urgent patches for exploited critical flaw

GitLab has issued emergency security updates for self-managed installations after fixing two critical vulnerabilities, including a maximum-severity flaw now listed by US authorities as actively exploited. The company released GitLab Community Edition and Enterprise Edition versions 19.3.2, 19.2.6 and 19.1.8 on September 10, urging administrators running affected versions to upgrade immediately.…

thearabianpost.com ·

GitLab has released emergency security updates to address two critical vulnerabilities, including a maximum-severity flaw actively exploited by attackers. The company released updates for GitLab Community Edition and Enterprise Edition versions 19.3.2, 19.2.6, and 19.1.8, urging administrators to upgrade immediately. The most serious flaw, CVE-2026-85706, carries a CVSS score of 10.0 and affects both Community Edition and Enterprise Edition, while another vulnerability, CVE-2026-87719, affects only Enterprise Edition.

These vulnerabilities allow attackers to read arbitrary files, bypass serialization controls, and potentially gain access to sensitive credentials.

Brief written by urgent.news from Arabian Post's own syndicated text. Machine-written — may contain errors; check the original before relying on it.

Read the original at thearabianpost.com →

More in Tech

Why Do We Still Need Microcontrollers?

Computers and smartphones are becoming more powerful every year. So I've been thinking about a simple question: Why do we still need small microcontrollers like Arduino, ESP8266, and ESP32?

  • Their compact size, affordability, and low power consumption make them ideal for many applications.
  • Edge AI and edge computing advancements may eventually reshape their role in embedded systems.

·dev.to

Understanding Cordis: The TypeScript Framework Built for Hot-Swapping Everything

Part 1 of the DeepSeek Harness: Kernel to Edge series: How the open-source (MIT) Cordis meta-framework enables zero-downtime plugin reloads and memory-leak-free architectures in TypeScript, backed by…

  • Cordis is an open-source TypeScript meta-framework enabling runtime dynamic composability.
  • Developed by Shigma and Koishi team for dynamic plugin updates in chatbot connections.
  • Formalized in academic paper establishing safe dynamic loading/reloading principles.

·dev.to

Is your Data Lakehouse actually a HIPAA liability?

Ninety-two percent of healthcare data breaches occur because of misconfigurations in the storage layer, yet most engineers I interview still think "encryption at rest" is the end of the conversation.

  • HIPAA compliance requires immediate PHI masking upon data ingestion.
  • God-mode service accounts with unrestricted access violate HIPAA standards.
  • Immutable audit trails and identity mapping enforce fine-grained access control.

·dev.to

OfferLoader network spreads malware through YouTube searches

Security researchers have mapped a pay-per-install malware operation using YouTube gaming channels and poisoned search results to distribute more than 10,000 distinct samples of a custom loader…

  • OfferLoader malware spreads via YouTube gaming channels and poisoned search results
  • CL-CRI-1171 network uses gaming-related YouTube content and SEO poisoning
  • Three malware families identified: Insomnia RAT, ARKTunnel, and Docro Hijacker

·thearabianpost.com

More from Saturday 12 September →