GitLab warns of high-severity 2FA bypass, denial-of-service flaws

Published on January 21, 2026

GitLab has patched a high-severity two-factor authentication bypass impacting community and enterprise editions of its software development platform. [...]

Continue reading on website
Other news

Tesla hacked, 37 zero-days demoed at Pwn2Own Automotive 2026

January 21, 2026
Security researchers have hacked the Tesla Infotainment System and earned $516,500 after exploiting 37 zero-days on the first day of the Pwn2Own Automotive 2026 competition. [...]

Hackers exploit security testing apps to breach Fortune 500 firms

January 21, 2026
Threat actors are exploiting misconfigured web applications used for security training and internal penetration testing, such as DVWA, OWASP Juice Shop, Hackazon, and bWAPP, to gain access to cloud environments of Fortune 500 companies and security vendors. [...]