SANS Internet Storm Center StormCast October 13th, 2026: GitLab Vulnerability, Let's Encrypt Certificate Changes, Android Malware, and MarkLogic Updates

🎬 The SANS Internet Storm Center StormCast for October 13th, 2026 covers four cybersecurity updates. GitLab has an integer overflow vulnerability in the CI/CD regular expression compiler that allows unauthenticated users to execute arbitrary code on on-premise GitLab servers, reported responsibly via HackerOne with no public exploit available. Let's Encrypt will reduce certificate lifetimes to 64 days starting February 10th, 2027, with the staging environment implementing this change on October 14th, 2026. Bitdefender discovered malware called Midnight Mimosa pre-installed on certified pre-owned Android phones that mimic flagship models like the S25 Ultra and i17 Pro, featuring capabilities including clickjacking, proxy botnet functionality, and selective disabling of Google Play Store. Progress Software's Mark Logic data management platform released October 2026 updates addressing vulnerabilities with CVSS scores up to 9.9, including issues allowing users with query privileges to execute arbitrary code, with some vulnerabilities stemming from legacy APIs still enabled in the system.