A malicious commit has executed code in your ci/cd pipeline. https:// depthfirst.com/research/going- depthfirst-achieving-gitlab-rce-via-two-ruby-memory-corruption-vulnerabilities

AI-assisted TikTok exploit reportedly demonstrated a zero-click RCE chain capable of reaching a device’s camera, microphone and photos. DepthFirst Labs’ autonomous agent found and chained the vulnerab

Don't use containers as a security boundary for AI agents - they can break out of them https:// depthfirst.com/research/contai ners-are-no-longer-safe

Security Researchers Publish GitLab RCE Exploit Code

Researchers at depthfirst published working proof-of-concept exploit code on July 24 for a GitLab vulnerability affecting self-managed instances (patched June 10). Authenticated users can execute commands as git via malicious Jupyter notebook commits.

Critical GitLab RCE vulnerability chain requires patching

Researchers discovered a critical remote code execution chain in GitLab by combining two Oji parser bugs exploitable via Jupyter notebook diffs. The vulnerability affects authenticated users and urgent patches are being urged.

Containers Are No Longer a Security Boundary | depthfirst

🐶 Need a break from Global AppSec? Get some serious puppy therapy at our Puppy Lounge, courtesy of @ depthfirstlabs ! 🐾❤️ 📍 Expo Hall, Pacific Concourse 🏡 All pups are fully adoptable! Add some pu

WHO partnerships, research, and unrelated policy updates

Unrelated collection of WHO health partnership announcements (April 2024), arXiv AI security research, weather statements, congressional bill tracking, FCC wireless innovation notice, and recent AI labor market commentary from November 2026. No coherent story.