Episode Details

In this briefing, we analyze two critical vulnerabilities demanding immediate attention from security practitioners: a GitLab GraphQL flaw allowing unauthenticated project destruction and CISA's emergency mandate for Ray AI framework patching. We explore the mechanics of DNS rebinding in distributed computing environments and the rise of the ShadowRay 2.0 botnet. The session also covers technical disclosures regarding Unisoc modem firmware that enables remote kernel takeovers via video call triggers, and the evolution of the Evooo1Bot Mirai-variant which now incorporates reverse SOCKS relays for persistent network pivoting.

Topics Covered

• 🚨 GitLab CVE-2026-19478: Unauthenticated project and data deletion risk for self-managed instances.
• ⚠️ CISA KEV Update: Mandatory patching for the Ray Python-native distributed computing framework.
• 📱 Android Kernel Exploitation: Chaining Unisoc modem flaws through SIP/SDP video call payloads.
• 🌐 Botnet Evolution: Mirai-derived Evooo1Bot adds credential sniffing and SOCKS relay modules.
• 🛡️ Windows Defender Bypass: Analysis of the ShieldBreak elevation of privilege vulnerability.

The information provided in this podcast is for educational and informational purposes only and does not constitute professional security advice. Organizations should consult their security teams and vendors for specific remediation guidance.

Neural Newscast is AI-assisted, human reviewed. View our AI Transparency Policy at NeuralNewscast.com.

• (00:14) - Introduction
• (00:14) - GitLab Project Deletion Flaw
• (00:14) - Ray AI Framework Exploitation
• (01:33) - Conclusion
• (01:33) - Android Kernel Attacks via Unisoc