GitLab Users Urged to Patch After Research Reveals Critical RCE Chain

Researchers chained two Oj parser bugs to achieve GitLab RCE via Jupyter notebook diffs, affecting authenticated users on unpatched versions. Depthfirst researchers published a working remote code execution exploit for GitLab on July 24, chaining two memory corruption bugs in Oj, a Ruby JSON parser with a native C implementation, into full command execution inside […]

July 27, 2026
Read More >>

EFF: Most Smart Wearables Still Fall Short on Privacy and Transparency

EFF says most smart wearables lack basic privacy protections, with Apple standing out for end-to-end encryption and transparency. Most smart wearables still treat privacy like an optional extra, and that’s a problem. The Electronic Frontier Foundation (EFF)’s review of major smart watches, rings, and bands makes the case plainly: these devices collect deeply personal health […]

July 27, 2026
Read More >>

LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations

A new report links 148 ransomware attacks to Italian organizations in H1 2026, with manufacturing the most targeted sector. Six months, 148 confirmed ransomware claims against Italian targets, and one sector taking the brunt of it. That’s the headline number from a new semi-annual tracker compiled by ransomNews under its RedACT project, which pulls together […]

July 27, 2026
Read More >>

Defensive Security Podcast Episode 354

Please consider supporting the DefSec podcast here.

Stories:
https://www.theregister.com/security/2026/07/07/enterprise-ai-still-smarting-from-leaping-before-looking/5267353
https://www.theregister.com/security/2026/07/07/github-ai-agent-leak…

July 26, 2026
Read More >>