Decagon Joins OpenAI’s B2B Marketplace as a Launch Partner23m ago Apple is adding new privacy safeguards for Mac users as AI agents get more powerful27m ago Meta Open-Sources Muse Gadget SDKs for DIY AI Hardware Devices31m ago Sean Parker is rebuilding Stability AI around music51m ago Meta open sources code to let you make Muse AI gadgets2h ago Anthropic to invest $100 million to train AI engineer talent57m ago Apple to Tighten Mac Data Controls in Guard Against AI Agents1h ago CrowdStrike and CoreWeave bring AI security to machine speed1h ago Dialogue with Eliezer Yudkowsky on Neural Networks1h ago Amazon’s New Push to Get Buy-In for Data Center Build-Out2h ago NetApp hands storage operations to AI agents, but humans still draw the boundaries2h ago Humans are not aligned either2h ago Trump Expected to Name ODNI’s Jay Clayton as AI Czar2h ago IBM and CoreWeave co-design controls for agent workloads2h ago

Decagon Joins OpenAI’s B2B Marketplace as a Launch Partner23m ago Apple is adding new privacy safeguards for Mac users as AI agents get more powerful27m ago Meta Open-Sources Muse Gadget SDKs for DIY AI Hardware Devices31m ago Sean Parker is rebuilding Stability AI around music51m ago Meta open sources code to let you make Muse AI gadgets2h ago Anthropic to invest $100 million to train AI engineer talent57m ago Apple to Tighten Mac Data Controls in Guard Against AI Agents1h ago CrowdStrike and CoreWeave bring AI security to machine speed1h ago Dialogue with Eliezer Yudkowsky on Neural Networks1h ago Amazon’s New Push to Get Buy-In for Data Center Build-Out2h ago NetApp hands storage operations to AI agents, but humans still draw the boundaries2h ago Humans are not aligned either2h ago Trump Expected to Name ODNI’s Jay Clayton as AI Czar2h ago IBM and CoreWeave co-design controls for agent workloads2h ago

Cybersecurity Business & Enterprise4 min reading time

GitLab Patches Critical 9.9 AI Gateway Flaw Allowing Command Execution on Self-Hosted Servers

The Hacker NewsPublished 4 hours ago

Read the full article

GitLab patched a critical vulnerability (CVE-2026-90970) in its AI Gateway that allowed command execution by logged-in users with Duo Agent Platform access on self-hosted servers. The flaw affects gateway versions before 19.2.4, 19.3.2, and 19.4.1, and GitLab urges immediate updates for self-hosted instances.

#application-security #cve-2026-90970 #gitlab

More in Cybersecurity

Man Charged With Illegally Shipping Nvidia Chips to China

Covered by 4 sources22h ago

Cybersecurity5 min read

OpenAI’s Medicare attack has exposed Australia’s ‘tech debt’. Fixing it could bring a big bill for taxpayers

Covered by 3 sources2d ago

Cybersecurity1 min read

California issues investigative subpoena to OpenAI over rogue agents’ hacking

Covered by 2 sources1d ago