Critical GitLab Flaw (CVSS 10.0) Could Allow Unauthenticated RCE Across 12 Years of Releases
GitLab released fixes on October 21 for a flaw that lets an attacker run code on a self-managed server without...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
LiteLLM Compromised in Supply Chain Attack Delivering Credential Stealer and Backdoor
Ravie LakshmananOct 21, 2026Malware / Artificial Intelligence The popular LiteLLM Python package has been compromised as part of a software...
Critical PHP vulnerabilities allow remote execution
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) has issued an alert after the PHP Foundation provided advanced...
Australia’s foreign-investment gatekeeper needs defence expertise
A common misunderstanding is that governments need public support for big national security decisions. If a government waits for public backing,...
Remediation in the era of AI: Fix what matters first
if ( !emtpy($headline_subheadline ) ) : ?> AI is accelerating vulnerability discovery and exploitation, creating more threats than teams can...
The Patch Apocalypse is here. Patching everything isn’t the answer.
if ( !emtpy($headline_subheadline ) ) : ?> AI is shrinking the gap between vulnerability disclosure and exploitation from weeks to...
Rogue AI: When agents stop advising and start acting
if ( !emtpy($headline_subheadline ) ) : ?> Agentic AI can restart services, change configurations, and close tickets on its own....
AI isn’t hallucinating—but your data might be
if ( !emtpy($headline_subheadline ) ) : ?> Organizations blame AI models when outputs are inaccurate, but many hallucinations originate from...
Before you automate systems, decide which data wins
if ( !emtpy($headline_subheadline ) ) : ?> AI is only as effective as the information it relies on. Organizations pursuing...
Suntory Oceania taps Databricks, Copilot Pro in AI drive
Key points Suntory Oceania is investing in Databricks and Copilot Pro while exploring native agentic options for its SAP core,...
In Pictures: Resilience, Rewired Breakfast with HPE, Microsoft and Commvault
All rights reserved. This material may not be published, broadcast, rewritten or redistributed in any form without prior authorisation.Your use...
AI and SaaS Vendor Due Diligence: A CISO Playbook for Third-Party Cyber Risk
Published: 21 October 2026 Executive summary AI vendor risk management should approve a defined use case, not grant permanent trust...
US Government Orders DeepSeek Out of Federal Civilian Systems
US Government Orders DeepSeek Out of Federal Civilian Systems Pierluigi Paganini October 21, 2026 PHP prepares emergency patches for two...
Widespread PHP Flaw May Cause Many Site Outages Today
Expect to see quite a few websites serving error pages today: Nearly 70 percent of websites need to update their...
OpenAI’s GPT-6 Agent Removed Safety Monitoring, Then Falsely Denied Doing So
OpenAI has revealed that two artificial intelligence (AI) agents powered by GPT-6.1 Sol and one GPT-6 Astra weakened misalignment monitoring...
