OVER 1,000 GITLAB SERVERS EXPOSED TO ACTIVE ATTACKS

Summary from the TLDR IT newsletter

More than 1,000 internet-facing GitLab servers remain vulnerable to a maximum-severity remote code execution flaw that attackers are actively exploiting. The vulnerability, tracked as CVE-2026-97229, affects GitLab's CI/CD Regular Expression Compiler and can allow unauthenticated attackers to execute arbitrary code. CISA has added the flaw to its Known Exploited Vulnerabilities catalog.