Cybersecurity is entering a more proactive phase as AI accelerates both vulnerability discovery and the need for faster defense. GitLab faced exploitation of a critical flaw roughly two days after disclosure, while Oracle released 943 security patches addressing more than 1,000 vulnerabilities across its portfolio. At the same time, cybersecurity providers are shifting toward continuous AI protection and virtual patching to reduce exposure before traditional fixes can be deployed.
Ready? This is your Week in Cybersecurity!
States Take Meta to Trial Over Social Media Safety
Meta is facing its most consequential US trial yet over alleged harms to children and teenagers on Facebook and Instagram, with four states seeking financial damages and changes to how the platforms operate. The case alleges violations involving child privacy, false advertising, and unfair competition, while also challenging product design decisions linked to youth safety.
Critical GitLab Flaw Exploited Shortly After Disclosure
A critical GitLab vulnerability was exploited in the wild roughly two days after it was publicly disclosed, highlighting how quickly attackers can move from vulnerability discovery to active exploitation. Tracked as CVE-2026-19478 with a CVSS score of 9.4, the flaw could allow unauthenticated attackers to modify or delete public projects and user data. Security researchers also warned that the vulnerability could enable supply chain attacks by allowing attackers to forge merge records and make malicious changes appear legitimate.
Oracle Rolls Out 943 Patches in August Security Update
Oracle’s August security update illustrates the scale of the vulnerability-management challenge facing enterprises. The company released 943 security patches addressing more than 1,000 vulnerabilities across two dozen products, including more than 460 flaws that can be remotely exploited without authentication. More than 150 vulnerabilities were classified as critical, while nearly 90 carried a CVSS score of 9.8 or higher.
Fortinet Expands Continuous AI Protection With Virtue AI Acquisition
Fortinet is expanding its AI security capabilities through the acquisition of Virtue AI, targeting protection for AI models, applications and autonomous agents from development through runtime. The technology adds capabilities for agentic system red-teaming, AI governance, continuous validation and real-time guardrails against risks such as prompt injection, data leakage and malicious tool calls.
Palo Alto Networks Launches Critical Defense Program for AI-Speed Threats
Palo Alto Networks is promoting a Critical Defense Program designed to address the shrinking window between vulnerability discovery and exploitation. The initiative brings cybersecurity providers, software companies, open-source projects and OT and medical-device organizations together to share vulnerability intelligence and deploy network-level “virtual patches” before official software updates are available.
