Rapid7
CompanySecurity timeline
- Vulnerability reported by Rapid7 BlogCritical GitLab flaw CVE-2026-97229 allows code execution and is now on CISA's exploited list
Recent news
2026 rankings of MSSP, incident response, managed SIEM and SOCaaS providers
Four Cyber Security News listicles rank providers of managed security services (MSSP), incident response retainers, managed SIEM and SOC-as-a-Service for 2026. Scores are editorial, weighted on detection quality, transparency, SLA strength and commercial flexibility, and are explicitly not lab results. The articles flag acquisition and roadmap uncertainty at Secureworks (Sophos integration), the Cylance and LogRhythm/Exabeam lineages, and advise checking contract terms before buying.
Critical GitLab flaw CVE-2026-97229 allows code execution and is now on CISA's exploited list
GitLab has fixed CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling that carries a CVSS score of 10.0. A Rapid7 proof of concept showed that an attacker who can commit a malicious CI configuration and a crafted path to a public project can run OS commands as the git user on self-managed instances. CISA added the flaw to its Known Exploited Vulnerabilities catalogue on 29 October 2026, so self-managed administrators should upgrade without waiting for the normal patch cycle.