Tuesday’s brief: GitLab’s critical fix, then Patch Tuesday, hijacked fridge controllers and Server 2012’s last update

Good morning. A critical GitLab fix came out yesterday, Microsoft’s October updates land this afternoon, and attackers in France found a new use for internet-facing fridge controllers. Here is the order we would work through it.

Lead Story

Self-managed GitLab servers need the October 12 critical patch. A bug rated 10.0 lets someone with no account run code through a crafted CI/CD regex. See the patch list →

Also Worth Your Attention

Microsoft’s October Patch Tuesday lands around 1 PM ET. The details aren’t public yet; here is how to have test machines ready. Prep the pilot ring →

The 5-Minute Cyber Brief

Don’t Miss the Policy Changes That Affect Security Decisions

Get the key CISA actions, new regulations, guidance, and risk shifts in a quick daily brief.

By subscribing you agree to our Privacy Policy.

Free. Weekday mornings. 5 minutes or less.

Attackers defrosted supermarket fridges across France through Danfoss controllers. Thousands of the controllers are reachable online. Check your controllers →

Windows Server 2012 gets its last update today, and Exchange 2016/2019 end October 31. Find the leftovers →

Also on the radar: Ahold Delhaize took some systems offline on Monday after what it called a cybersecurity incident (BleepingComputer), and Ledger confirmed a hardware spy implant in a wallet bought through the reseller CryptoBilis, which it ties to every reported fund drain (BleepingComputer).

Slack paste: Tue Oct 13: (1) GitLab self-managed to 19.4.2 / 19.3.5 / 19.2.8 today. (2) Patch Tuesday ~1 PM ET: pilot ring ready, read MSRC notes first. (3) Danfoss AK-SM controllers off the internet, firmware 4.3.1+. (4) List Server 2012 and Exchange 2016/2019 boxes with owners and dates.

Go Deeper

Get this in your inbox every weekday morning: subscribe to the Daily Brief.

George Bailey

George Bailey is the byline of the CyberExperts editorial desk, the team behind the CyberExperts Daily Brief. The desk covers vulnerabilities, breaches and security news from vendor advisories, CISA alerts and other primary sources, and links those sources in every story. Questions or corrections: [email protected].