2026年6月25日の
セキュリティ情報

Subject: [Action Required] GitLab Security Updates for Multiple Vulnerabilities

Dear IT/Security Team,

GitLab has released security updates addressing 13 vulnerabilities in both Community Edition (CE) and Enterprise Edition (EE).

■ Overview
Several high-severity flaws have been identified, including CVE-2026-10086 and CVE-2026-10712 (XSS allowing arbitrary code execution) and CVE-2026-12053 (information disclosure via insufficient output filtering). These could allow attackers to execute malicious scripts or access sensitive project data.

■ Scope
- GitLab Community Edition (CE)
- GitLab Enterprise Edition (EE)

■ Mitigation Steps
1. Verify the current version of your GitLab installation.
2. Apply the latest security patches provided by GitLab immediately.

■ Reference
- GitLab Official Security Advisory

Priority: High
Deadline: Immediate

Subject: [Intel] New Stealth Backdoor 'Mistic' by KongTuke

Dear Team,

We are sharing intelligence regarding a new stealth backdoor named 'Mistic' linked to the threat actor KongTuke (Woodgnat).

■ Overview
KongTuke, acting as an access broker, utilizes the Mistic backdoor to maintain persistent access for later sale to ransomware groups (e.g., Qilin, Black Basta). The infection chain involves DLL side-loading where a legitimate process (MpExtMs.exe) loads a malicious 'version.dll', which subsequently drops the 'EndpointDlp.dll' loader.

■ Scope
- Windows-based endpoints and servers
- Targeted sectors: Insurance, Education, IT, and Professional Services

■ Recommended Actions
1. Monitor for the creation or loading of suspicious DLLs named 'version.dll' or 'EndpointDlp.dll'.
2. Review EDR logs for anomalous behavior originating from legitimate Microsoft processes.
3. Audit privileged account activity and enhance network segmentation to prevent lateral movement.

■ Reference
- Symantec Security Research

Priority: Medium
Deadline: Ongoing