GitLab CVE-2026-85706 (CVSS 10.0), actively exploited. Unauthenticated path traversal in commits API — one request reads arbitrary files, no creds needed. Affected: 18.7-19.1.7, 19.2-19.2.5, 19.3-19.3.1. Fix: 19.1.8/19.2.6/19.3.2. CISA KEV deadline today — patch & rotate tokens. #InfoSec #GitLab

Google's Android developer verification takes effect Sept 30, 2026 in Brazil, Indonesia, Singapore & Thailand — apps must come from verified developers to install. Sideloading remains possible via ADB or a new advanced flow. Global rollout follows in 2027. #Android #TechNews

A dark web marketplace called Nexus advertised scans of 170M+ North American ID documents — 153M driver's licenses, IDs, travel docs & medical cards — allegedly sourced from IDScan.net. FBI is investigating; Nexus has since gone offline. #DataBreach #Infosec

starting sept 11, EU manufacturers must report actively exploited flaws in products ALREADY SOLD.

finally, some accountability for the hardware in your home (routers, doorbells, fridges).

GDPR fixed how they handle your data. The CRA tries to fix the devices themselves.

#CyberResilienceAct