GitLab Orbit is a graph-based tool for quickly determining the reach of a vulnerability across an organization’s software development environment. Security scanners can identify affected components, but teams often still have to manually connect findings to projects, services, deployment pipelines, environments, and owners. Orbit combines GitLab data - including code, merge requests, pipelines, work items, and security findings - so users or AI agents can ask in plain language which projects are affected and who is responsible. Its central argument is that organizations need this map ready before a security disclosure, because attackers can exploit flaws faster than teams can assemble an exposure list from separate tools.
The PHP2Shell vulnerabilities illustrate the challenge: PHP may appear in application dependencies, operating-system packages, container images, old CI jobs, or manually managed servers. Orbit can help map repository-declared use and related ownership, while code searches and vulnerability reports help confirm images, versions, and open findings. Teams must still compare repository results with runtime inventories, since systems outside GitLab repositories may be missed. GitLab reports that, in tests using the same model and tasks, agents using Orbit were up to 11 times faster, used up to 4.5 times fewer tokens, and needed up to 45 times fewer retries. Role-based permissions govern access, and built-in and external agents can query the graph. Orbit is generally available to Premium and Ultimate customers on GitLab.com, with Self-Managed and Dedicated availability planned in the coming weeks.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
CVE-2026-98432 is a critical Linux IPv4 TCP handshake use-after-free, remotely exploitable without authentication and potentially allowing root command execution on servers with multipath TCP listeners. Upstream fixes are available, but Ubuntu and RHEL had not yet shipped patched kernels as of October 29, 2026. (atlasum.net)
Colin Percival discovered that Intel Hyper-Threading could leak cryptographic secrets and developed an exploit to recover an RSA key. He argues scholars who find security flaws should coordinate quietly with affected teams so patches are ready before public disclosure. (daemonology.net)
Binance says it has covered 90% of the $6.3 billion in cryptocurrency stolen in a hack and will absorb the losses rather than pass them to users. It has set aside more than $6.34 billion and says sourcing the remaining assets may take longer. (bbc.com)
Plymouth canceled its Flock license-plate camera contract after the system wrongly tracked a couple, but the company did not respond to removal requests. The police chief disconnected the cameras’ power to ensure they stopped recording vehicles. (thedrive.com)
A hacking group said it exploited a vulnerability in software used to manage LED advertising screens, displaying pornographic footage on a highway billboard in Egypt and accessing screens in several other countries. Egyptian authorities opened an investigation and suspended roadside displays, while the incident raised questions about security at the billboard operator. (cairoreport.org)
VOLTA infostealer steals credentials, financial data, and personal details, then sends an evidence bundle to an LLM to rank victims by potential value. If a model refuses, the malware tries a chain of other models, making AI a key part of its intelligence-gathering workflow. (blog.talosintelligence.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.