GitLab patches CVE-2026-97229, Telegram fixes one-click takeover
GitLab rushes a max-severity RCE fix, Telegram closes a one-click account takeover, and Bitdefender finds malware baked into budget phones.
Sources:
GitLab warns of max severity code execution vulnerability
Telegram Desktop: one-click account takeover via IPC injection | beaksec
How I Found a $90,000 Remote Code Execution Vulnerability in Google | Simon Koeck
Experts warn cheap Android phones are being shipped with malware built in, so be on your guard
Hackers hide behind Microsoft's own websites to get past email filters and launch phishing campaigns
📰 Read the full edition on the site
🤖…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.