importantSYS.SOURCE: Alpine Linux Development Team• 2026-10-28T23:45:46Z

GitLab Security Incident: Attempted Exploitation of Critical Regex Vulnerability CVE-2026-97229

#vulnerability #security #ruby #gitlab #exploitation

An attacker attempted to exploit the critical CVE-2026-97229 vulnerability in GitLab's regex processing, which was patched in Ruby but not fully addressed in GitLab's environment. Alpine Linux rebuilt their GitLab instance due to uncertainty about potential compromise, despite no evidence of successful code execution.

Read original article

*** END OF TRANSMISSION ***

> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS> US BATTERY STORAGE CAPACITY SURPASSES 20.2 GWH IN Q2 2026, SETTING NEW RECORD > CISCO ADDRESSES ACTIVELY EXPLOITED VULNERABILITY IN ASA AND FTD VPN SOFTWARE > GITHUB INTRODUCES NPM PACKAGE FIREWALL FOR REAL-TIME MALICIOUS ACTIVITY DETECTION > CRITICAL GITLAB VULNERABILITY CVE-2026-97229 EXPLOIT ATTEMPTED ON ALPINE LINUX'S SERVER > SPAIN HIGH-SPEED TRAIN COLLISION RESULTS IN DOZENS OF FATALITIES > CISCO SD-WAN VULNERABILITY EXPLOITED BY HACKERS TO DEPLOY KEYDRIFT MALWARE FOR ENCRYPTION KEY THEFT > CUBA EXTENDS DAYLIGHT SAVING TIME UNTIL 2027, SKIPPING 2026 CLOCK ADJUSTMENT > ZERO-CLICK REMOTE DOS VULNERABILITY IN ANDROID TELEPHONY VIA MALFORMED WAP PUSH SMS > EXPLOITING LOGIC BUGS TO CREATE A MICROSOFT EDGE FULL CHAIN ESCAPE > CHINA-NEXUS THREAT ACTOR EXPLOITS VMWARE ESX ZERO-DAY VULNERABILITY TO EVASION AUDIT TRAILS