Today, attackers are targeting software in GitLab and Cisco's firewalls. Small businesses should ensure their systems are updated to protect against potential exploits.
GitLab Community Edition and Enterprise Edition (CVE-2026-97229)
GitLab Community Edition and Enterprise Edition contain a vulnerability that allows attackers to execute arbitrary code. Businesses should update their GitLab version to the latest security patch to mitigate this risk.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Cisco Secure Firewall ASA Software and Cisco Secure FTD Software (CVE-2026-76418)
Cisco Secure Firewall ASA Software and Secure FTD Software have a flaw that can cause a denial of service. Users should check for and install the latest security updates to safeguard their network.
What to do: Install the maker's update now. If there is no update yet, follow the maker's own steps to reduce the risk, and stop using the product until it is fixed if neither is available.
Tip of the day: Keep a backup that is not connected
Ransomware encrypts what it can reach. A backup that is offline, or kept by a service that holds old versions, is the one that saves you.
Doing it once, properly
The lowest quote rarely stays the lowest. Work that skips the security basics tends to be redone from scratch later, and redoing it costs more than doing it properly once.
Sources
- CISA Known Exploited Vulnerabilities catalogue
- CVE-2026-97229 on the National Vulnerability Database
- CVE-2026-76418 on the National Vulnerability Database
Written each morning from CISA's catalogue of vulnerabilities known to be exploited, with the help of an AI model that runs on our own server. Check the sources before acting, and talk to us if you are not sure whether you are affected.