Daily Tech Insights — Monday, November 2, 2026

We cover a critical GitLab vulnerability, a Microsoft VPN fix, device code phishing, and two AI-related security stories. Full credits and links in the show notes.

Daily Tech Insights — Monday, November 2, 2026

This episode examines the active exploitation of a critical GitLab remote code execution flaw, urging immediate patching for self-managed instances. It also covers a Microsoft Always On VPN fix, rising device code phishing threats, and the Northflank breach that compromised AI API keys. Finally, we discuss a new AI-driven malware strain that ranks stolen data by resale value.

In this episode

• Over 1,000 GitLab servers remain unpatched against CVE-2026-97229, a critical remote code execution flaw now added to the CISA KEV catalog.
• Microsoft has released KB5127936 to resolve Always On VPN failures caused by recent Windows 11 updates, with a recommendation to use a single tunneling protocol.
• Device code phishing is emerging as a threat where attackers trick users into entering codes to gain account access and send phishing emails.
• The Northflank security breach resulted in the unauthorized use of customer AI API keys, potentially causing unexpected billing and data leaks.
• A new Windows malware named VOLTA-AUTODOXER uses AI to rank stolen credentials and data by their potential cash value for resale.

News stories

• Northflank security breach leads to abuse of customers' AI API keys — BleepingComputer
• Device code phishing: what it is, how to spot it and what to do if you entered a code — 2-Spyware
• Windows 11 VPN Fix: Microsoft Resolves Always On VPN Failures — The 420.in
• Windows malware VOLTA-AUTODOXER uses AI to rank stolen victim data by cash value — news.lavx.hu
• Manager threatened to fire a colleague, then gave them a critical task – which they flubbed — The Register
• Over 1,000 GitLab servers vulnerable to ongoing RCE attacks — BleepingComputer

Sources

• Northflank security breach leads to abuse of customers' AI API keys — BleepingComputer
• Device Code Phishing: What It Is and What To Do — 2-Spyware
• Windows malware VOLTA-AUTODOXER uses AI to rank stolen victim data by cash value — LavX News

Music credits

• Music: "Werq" by Kevin MacLeod (incompetech.com) (CC BY 4.0, https://creativecommons.org/licenses/by/4.0/)

---

Voices in this episode were generated with AI text-to-speech from the hosts' script.
Research and drafting for this episode were assisted by AI tools. All content was reviewed and fact-checked by the host.
Views expressed are my own and do not represent my employer.