GitLab AI Gateway Flaw: CVE-2026-90970 Patch Guide
Your self-hosted GitLab AI Gateway might be carrying a flaw that hands command execution to any logged-in user with Duo Agent Platform access, because GitL...
Expert analysis, threat intelligence, and practical guidance from Red Secure Tech's security specialists — covering penetration testing, vulnerability assessment, incident response, and secure development for UK businesses.
Your self-hosted GitLab AI Gateway might be carrying a flaw that hands command execution to any logged-in user with Duo Agent Platform access, because GitLab just disclosed a critical vulnerability in...
Read Full ArticleYour self-hosted GitLab AI Gateway might be carrying a flaw that hands command execution to any logged-in user with Duo Agent Platform access, because GitL...
A spear-phishing email arrives. It looks like a routine message from a trusted sender, and it contains what appears to be an attachment preview, rendered e...
Your Dell storage infrastructure might be wide open to attackers right now, because Dell just dropped a bombshell security advisory, revealing six critical...
You did not click a link. You did not download an attachment. You did not approve a permission prompt. You did not even touch your phone. And yet, your iP...
OpenAI said on Wednesday that it identified and disrupted a coordinated distillation campaign designed to illicitly extract protected reasoning from its AI...
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw that Apple says may have been used in...
Microsoft has warned about phishing campaigns that distribute an installer for MSP360 Remote Monitoring and Management software, and the lures are the usua...
You search for a piece of software you need, you scan the page, you click the first result because it looks official, and you land on a page that asks you...
Our blog insights are backed by hands-on service delivery. Whether you need a penetration test, vulnerability assessment, emergency website recovery, or secure web development — our UK cybersecurity specialists are ready to help.
Emergency malware removal, backdoor elimination, blacklist delisting, and full post-incident hardening for compromised websites.
Authorised simulated attacks exposing real vulnerabilities in your web applications, networks, and infrastructure before attackers do.
Systematic identification and prioritisation of security weaknesses across your digital estate — with actionable remediation guidance.
OWASP-aligned web application development with security engineered in from architecture through to penetration-tested deployment.
Advanced adversary simulation testing your organisation's detection and response capabilities against real-world threat actor behaviour.
Actionable intelligence on threat actors, attack vectors, and emerging risks targeting your sector — enabling proactive defensive decisions.
© 2016 – 2026 Red Secure Tech Ltd. Registered in England and Wales — Company No: 15581067