Skip to main content
Tag

Vulnerability

7 articles tagged Vulnerability from OVERLORD Team LTD, including "GitLab's AI Gateway had a 9.9 flaw that let users run commands on the host", "SalesBleed: how a web form hijacked Salesforce's AI agents", "Eleven breaches in twenty-six seconds".

Featured

Security

GitLab's AI Gateway had a 9.9 flaw that let users run commands on the host

GitLab patched a CVSS 9.9 sandbox escape (CVE-2026-90970) in its self-hosted AI Gateway that let Duo Agent Platform users reach arbitrary command execution on the host.

Read
Security

SalesBleed: how a web form hijacked Salesforce's AI agents

Zenity Labs found three Salesforce Agentforce flaws, dubbed SalesBleed, that let a single lead form hijack AI agents for zero-click CRM data theft and phishing.

Read
Security

Eleven breaches in twenty-six seconds

GreyNoise says a Russian-speaking actor pointed hundreds of AI agents at PaperCut NG/MF and took 440 servers in 48 countries. The patch had been out for three days before the campaign even started.

Read
Security

IKE is not a set-and-forget VPN checkbox

CISA put a Windows IKE Extension RCE on the KEV list after seeing it used. If your edge still speaks IPsec, treat IKE like a live service, not a set-and-forget box.

Read
Engineering

Your kernel crypto socket is leaving

LWN reports Fedora moving to restrict AF_ALG, the old userspace crypto socket, after flaws like Copy Fail. Kernel 7.1.9 stable landed the same week. Name your branch.

Read
Security

Someone else has to sign the tree

Trail of Bits is an independent signer on Signal's key-transparency work. If your product stores secrets or model memory, you also need a third party who can say the tree is wrong.

Read
Security

Eight hours in someone else's EHR

CareCloud told HHS that 3.76 million people were affected after an attacker spent eight hours in an EHR environment. Dwell time is the product. Detection is the service.

Read

Send the ticket

Write what is broken or what you want shipped. We will say if it is a week or a quarter.

Start a project