Active exploitation of CVE-2026-85706 (CVSS 10.0) exposes GitLab secrets. Upgrading blocks new requests, but exposed credentials must be rotated immediately.

CVE-2025-4427 is a medium-severity Ivanti EPMM authentication bypass. CrowdSec observed 3,978 exploitation signals across 89 days.

CrowdSec CEO Philippe Humeau shares the full story behind the 2026 supply chain attack, from the source code leak and forensic investigation to the lessons learned.

CrowdSec update on a source code exposure that occurred in May 2026, including the scope, impact, investigation, and security measures taken.