CyberHighConfirmedAccelerating
9.8
Microsoft patches critical Entra ID vulnerability exploited in active attacks
BleepingComputer·US·3 days ago
Threat actors are actively exploiting CVE-2026-19478, a vulnerability allowing unauthenticated modification or deletion of public GitLab projects. Security researchers have confirmed in-the-wild exploitation via honeypot telemetry, necessitating immediate patching for self-hosted instances.