Daily Brief
Daily Brief, October 13, 2026
Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch
Threat actors have been exploiting a critical SonicWall SMA 1000 flaw within days of public disclosure, with 135 exploitation attempts observed after patching guidance was issued. As a pre-authentication SSRF issue, it could let an attacker force the appliance to make requests on their behalf.
Review SonicWall SMA 1000 exposure now, restrict access where possible, and check logs for suspicious outbound requests or signs of exploitation.
GitLab warns of max severity code execution vulnerability
GitLab warned users to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. This matters because code execution in a CI/CD platform can expose source code, secrets and build pipelines.
Identify all GitLab instances, confirm their versions, and patch or mitigate the vulnerable component before the next build window.