Topic Thread

#vulnerability-management

2 published observations tracking this thread.

AI agents scanning code changes before submission and routing validated fixes into the development workflow

Security & Developer Infrastructure7 min read

Google Is Moving Vulnerability Scanning Into the Code-Submit Path

The important change is operational: security review is being treated as a continuous property of every code change instead of a large scan performed after software has accumulated.

2026-09-19#application security · #AI agents

GitLab repository API path traversal incident moving from patching into forensic verification

Web Security & Supply Chain7 min read

GitLab's Critical File-Read Flaw Shows Why Patching Is Only the First Incident-Response Step

GitLab patched CVE-2026-85706 on September 10 and CISA added it to the Known Exploited Vulnerabilities catalog on September 11. The newer operational signal is GitLab's guidance for checking whether suspicious requests actually disclosed file contents.

2026-09-19#GitLab · #CVE-2026-85706