Matthews Enterprises (PTY) LTD, Francois Matthews GitLab AI Gateway sandbox escape is a 9.9, patches are out Self-managed GitLab AI Gateway needs 19.2.4, 19.3.2, or 19.4.1. An authenticated Duo user can escape the prompt sandbox and run commands. GitLab-hosted is already fixed. Cybersecurity Oct 3, 2026
Matthews Enterprises (PTY) LTD, Francois Matthews CISA lists two Zammad bugs that an AI-driven attack already chained to root Two Zammad bugs were used as zero-days and chained to root. CISA listed both. Move to Zammad 7 or take the instance offline, then hunt. Cybersecurity Oct 3, 2026
Matthews Enterprises (PTY) LTD, Francois Matthews FortiMail zero-day is exploited, and most fixes are not shipped FortiMail CVE-2026-104286 is exploited. Fixed builds are listed as upcoming, not available. Disable Identity-Based Encryption or take webmail off the internet. Cybersecurity Oct 3, 2026
