TECH NEWS

GitLab Patches Critical Code Injection Vulnerability

GitLab on Monday rolled out patches for two vulnerabilities, including a critical-severity code injection flaw that can be exploited without authentication.

Tracked as CVE-2026-19478 (CVSS score of 9.4), the security defect allows attackers to modify or delete user data and public projects via a GraphQL directive, GitLab explains in its advisory.

The second bug is CVE-2026-19650 (CVSS score of 7.1), a cross-site request forgery (CSRF) issue impacting the GraphQL multiplex query handler.

“GitLab has remediated an issue that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling,” the advisory reads.

The two vulnerabilities impact all GitLab Community Edition (CE) and Enterprise Edition (EE) versions from 18.2, 19.0, 19.1, and 19.2 onwards. They were addressed in GitLab CE/EE versions 18.11.11, 19.0.8, 19.1.6, and 19.2.4.

“We strongly recommend that all self-managed GitLab installations be upgraded...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

https://www.itvoice.in/wp-content/uploads/2026/08/iQOO_Hackathon_2026_Export_16_9-scaled.png

iQOO Hackathon 2026: ₹40 Lakh AI Innovation Challenge

iQOO, the high performance smartphone brand, today has announced the launch of iQOO Hackathon 2026, India’s first hybrid mobile hackathon, inviting engineers, young developers, AI enthusiasts and early IT professionals across India to build technology solutions for real-world challenges. With registrations now open, the hackathon will travel across Bengaluru,

https://image.theregister.com/5288528.jpg?imageId=5288528&x=0&y=0&cropw=100&croph=100&panox=0&panoy=0&panow=100&panoh=100&width=1200&height=683

UK puts Google AI on the flight path to fewer contrails

PUBLIC SECTOR Trial will test whether small route and altitude tweaks can reduce aviation's warming impact Britain is putting Google AI in the flight-planning loop to see whether airliners can dodge the patches of sky where their vapor trails are most likely to stick around and warm the

https://assets.bwbx.io/images/users/iqjWHBFdfxIU/iqqCSYVTIrLg/v0/1200x800.jpg

Baidu reports Q2 revenue down 2% YoY to ~$4.62B, below ~$4.69B est. and its fifth straight quarterly decline, and net income of ~$341M, as it lags AI rivals

Sponsor Posts Subquadratic: the LLM built for 12M-token reasoning — SubQ can reason across entire codebases and document sets in one pass with no RAG workarounds. Read how SubQ 1.1 Small holds near-perfect retrieval out to 12M tokens. Most carriers track everything. Cape doesn't. — Unlimited talk, text &

https://www.itvoice.in/wp-content/uploads/2026/08/Copy-of-Redington-2026-08-18T150327.657.jpg

Tech Data Expands IBM Distribution Across Asia Pacific

Tech Data, a TD SYNNEX company, and a leading global distributor and solutions aggregator for the IT ecosystem, today announced the expansion of its IBM distribution footprint across Asia Pacific (under the Tec D brand in Malaysia). This is part of TD SYNNEX’s global expansion of their IBM distribution,

Read more

iQOO Hackathon 2026: ₹40 Lakh AI Innovation Challenge

UK puts Google AI on the flight path to fewer contrails

Baidu reports Q2 revenue down 2% YoY to ~$4.62B, below ~$4.69B est. and its fifth straight quarterly decline, and net income of ~$341M, as it lags AI rivals

Tech Data Expands IBM Distribution Across Asia Pacific