Security news.
Critical remote code execution flaws are demanding immediate patching across enterprise systems, led by a maximum-severity GitLab bug and actively exploited SonicWall appliances. Physical and OT operational disruption also escalated this week, highlighted by compromised Danfoss supermarket refrigeration controllers and physical hardware implants discovered inside Ledger hardware wallets.
GitLab Fixes CVSS 10.0 Remote Code Execution Vulnerability
GitLab released urgent patches for Community and Enterprise Editions addressing a maximum-severity flaw in its CI/CD regular expression compiler that allows unauthenticated arbitrary code execution.
Critical SonicWall SMA 1000 SSRF Flaw Faces In-the-Wild Exploitation
Attackers are actively targeting CVE-2026-102255, a CVSS 10.0 pre-authenticated server-side request forgery flaw affecting SonicWall Secure Mobile Access appliances.
Attackers Hijack Danfoss Controllers to Defrost Supermarket Refrigerators
Threat actors gained remote access to Danfoss refrigeration controllers across hundreds of European supermarkets, driving temperatures up to 50°C and causing massive food spoilage.
Ledger Confirms Hardware Spy Implants Behind $86 Million Crypto Theft
An investigation revealed rogue circuit boards hidden beneath device screens on Ledger hardware signers sold via an authorized reseller to exfiltrate private credentials.
Bricksforge WordPress Plugin Bug Actively Exploited to Hijack Sites
Attackers are exploiting CVE-2026-85097 in the wild to compromise WordPress environments running vulnerable installations of the Bricksforge plugin.
Progress Discloses Critical Flaws in MarkLogic Server Databases
Progress Software disclosed 31 vulnerabilities in MarkLogic Server, including critical flaws that allow delegated management accounts to escalate to persistent administrator control.
Budget Android Smartphones Found Shipping With Preinstalled Malware
Researchers identified "Midnight Mimosa," a firmware-embedded malware campaign targeting low-cost MediaTek Android devices to covertly run ad fraud and enlist phones into residential proxy networks.
LG Smart TVs Vulnerable to Pre-Auth Local Network Root Compromise
A chain of three vulnerabilities across LG webOS versions allows local unauthenticated attackers to obtain root privileges without requiring user interaction.