GitLab RCE now exploited, Linux kernel remote root | Cyber Security News Oct 30

A GitLab flaw that runs code on the server is now being exploited, a Linux kernel TCP flaw gives remote root while Ubuntu and RHEL wait on a fix, and the browsers built into five AI coding tools could run code or read a developer's files. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: What's the strangest password you've ever found while cleaning up an environment? Reply in the comments or at [email protected].

1. Update: GitLab 10.0 flaw now exploited - CVE-2026-97229 - Fixed: 19.4.2, 19.3.5 or 19.2.8; Ruby 3.3.13, 3.4.12 or 4.0.9 - federal due 2026-11-01 - Do: Upgrade self-managed GitLab and close open sign-up - https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-4-2-released/

2. Linux TCP flaw gives remote root, no Ubuntu fix - CVE-2026-98432 - Do: Install the fixed Linux kernel as it ships - https://ubuntu.com/security/CVE-2026-98432

3. Update: WordPress update flaw under attack - Fixed: 7.1.4 (backports to 4.7.39) - Do: Update WordPress core and block wp-content/upgrade - https://wordpress.org/news/2026/10/wordpress-7-1-4/

4. AI coding tools' built-in browsers leak files - Do: Keep long-lived secrets off developer laptops - https://forever.security/blog/embrace-hacking-5-ai-assistants-embedded-browsers-technical

5. Malware bills its AI to your OpenAI key - Do: Alert on AI API calls from unexpected hosts - https://blog.talosintelligence.com/nik-c2-new-ai-enabled-framework/

6. Report: personal AI agent got admin on DoD network - Do: Give AI agents their own scoped accounts - https://cybersecuritynews.com/accenture-contractor-allegedly-gave-claude-access/

7. Fake AI crawlers hunt for .env files and keys - Do: Block web requests for .env and key files - https://www.cequence.ai/blog/ai-agent-impersonation

8. MLflow fixes six flaws, one needs no login - CVE-2026-118628, CVE-2026-118627, CVE-2026-118626 (+ 3 more) - Fixed: 3.17.0 - Do: Upgrade MLflow and turn on its login - https://www.zerodayinitiative.com/advisories/ZDI-26-844/

9. Chrome update fixes 21 flaws, one critical - CVE-2026-76024 - Fixed: 156.0.8078.79/.80 - Do: Push the Chrome update and force the restart - https://chromereleases.googleblog.com/2026/10/stable-channel-update-for-desktop_02107719452.html

10. Admin password insulted hackers, then let one in - Do: Keep admin accounts off legacy servers - https://support.microsoft.com/en-us/topic/microsoft-security-advisory-update-to-improve-credentials-protection-and-management-may-13-2014-93434251-04ac-b7f3-52aa-9f951c14b649