Gitlab — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• MuddyWater Targets U.S. Entities Amid Geopolitical Tensions

  In early 2026, the Iranian APT group MuddyWater launched cyberattacks against U.S. banking, a major airport, and Israeli operations of a U.S.-based software company. The attacks intensified in March, coinciding with…

  16 articles · Updated July 22, 2026
• Void Dokkaebi's Malware Campaign Exploits Developer Repositories via Fake Job Interviews

  Void Dokkaebi, a North Korean threat actor, has escalated its malware distribution tactics by using fake job interviews to compromise software developers. This campaign, known as the 'Contagious Interview,' targets…

  22 articles · Updated April 22, 2026
• FishMonger Expands SprySOCKS Malware to Windows with Kernel-Level Stealth

  ESET researchers have identified two new Windows variants of the SprySOCKS backdoor, previously exclusive to Linux, attributed to the Chinese cyberespionage group FishMonger. The variants, labeled WIN_DRV and WIN_PLUS,…

  12 articles · Updated June 16, 2026
• GitLab Issues Emergency Patches for Multiple Security Vulnerabilities

  GitLab has released urgent security patches for versions 19.0.1, 18.11.4, and 18.10.7 to address seven vulnerabilities affecting both Community Edition (CE) and Enterprise Edition (EE). The flaws include access control…

  2 articles · Updated May 30, 2026
• Critical Vulnerabilities Discovered in GitLab Products

  Multiple high-severity vulnerabilities have been identified in GitLab Community Edition (CE) and Enterprise Edition (EE) products, affecting versions 12.10.0 to 19.0.1. The vulnerabilities, including CVE-2026-6552,…

  25 articles · Updated June 16, 2026
• Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

  A newly disclosed vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named 'Copy Fail', allows unprivileged local users to gain root access on virtually all major Linux distributions released since 2017.…

  227 articles · Updated April 30, 2026
• Critical GitLab Gateway Flaw CVE-2026-1868 Allows RCE

  GitLab has patched a critical vulnerability identified as CVE-2026-1868, which has a CVSS score of 9.9. This flaw affects the self-hosted AI Gateway, allowing remote code execution (RCE) through insecure templates.…

  4 articles · Updated February 8, 2026
• Critical GitLab Vulnerabilities Enable XSS and DoS Attacks

  On May 13, 2026, GitLab released critical patch versions 18.11.3, 18.10.6, and 18.9.7 to address multiple high-severity vulnerabilities. These flaws could be exploited by threat actors to hijack developer sessions…

  3 articles · Updated May 14, 2026
• Gogs Vulnerability Allows Remote Code Execution via Path Traversal

  Gogs, a self-hosted Git service, has a vulnerability allowing path traversal in organization names. This flaw permits attackers to create nested Git repositories, leading to the potential for Remote Code Execution (RCE)…

  3 articles · Updated June 24, 2026
• Critical Vulnerabilities Discovered in GitLab: Immediate Action Required

  GitLab has disclosed multiple high severity vulnerabilities affecting both Community and Enterprise Editions, necessitating immediate patching. The vulnerabilities include CVE-2026-2370 and CVE-2026-3857, which allow…

  16 articles · Updated March 27, 2026

Recent Intelligence Reports

• T1102 — attack.mitre.org · July 23, 2026
• SleeperGem attack targets Ruby ecosystem with malicious gems — Feeds.Feedburner · July 20, 2026
• Ziarul Financiar Situaţia de la ANCPI devine tot mai gravă: Instituţia anunţă din nou vineri seară că toate servicile rămân indisponibile şi nu dă niciun termen de soluţionare, după atacul cibernetic. ”Indisponibilitatea aplicaţiei face imposibilă înregistrarea unor noi cereri de recepţie şi/sau înscriere, cât... — www.zf.ro · July 18, 2026
• Ransomware group claims breach of chip design firm Synopsys, alleges access to Bosch data — Teiss · July 15, 2026
• Hackers threaten to leak Bosch engineering data after alleged Synopsys hack — Cybernews · July 13, 2026
• Gogs has Path Traversal in organization name that results in RCE through Git hooks Home on GitLab Advisory Database (GLAD) / 8h Organization names containing path traversal sequences (../) are accepted by Gogs, and repositories under them are written to paths following these path traversals. This allows storing/retrieving data for repositories at arbitrary locations on the filesystem. By creating nested structure of Git repositories, one can overwrite the other's hooks configuration to result in — advisories.gitlab.com · June 24, 2026
• Advanced Kernel — Rescana · June 17, 2026
• Warning: Multiple high vulnerabilities in GitLab CC/EE, Patch Immediately! — Ccb.Belgium.Be · June 16, 2026

Related Entities