GitLab Patches Critical Unauthenticated GraphQL Vulnerability

Security news covering a critical unauthenticated GitLab GraphQL vulnerability (CVE-2026-19478), a CISA KEV-listed Ray vulnerability reportedly enabling remote code execution (CVE-2025-62593), the Evooo1Bot Mirai-based Linux botnet, a SafePal customer data breach, the SANDCLOCK LiteLLM supply-chain attack, alleged McDonald’s employee-data exposure, Akira ransomware evasion of EDR via Safe Mode, and major DDoS attacks against Threema. The most urgent items are the actively exploited Ray flaw and the critical GitLab vulnerability enabling unauthorized project modification or deletion.