Weekend Short: GitLab Fix and the Delivery Message Trick to Ignore
It's Saturday, so we're keeping this brief. One threat worth knowing about, one tip you can use straight away.
GitLab patches a critical flaw
GitLab, the tool many organisations use to store and manage computer code, has released a fix for a serious security hole in one of its add-on features. The vendor has rated it critical.
The flaw affects self-hosted GitLab servers. That means it's mainly a concern for businesses, tech teams, universities and public bodies that run their own servers. It is not something sitting on your home laptop or phone, so most listeners don't need to take any action.
If you work somewhere with an IT team that uses GitLab, it's worth a quick message on Monday to check they've seen the update. A polite nudge helps.
The delivery message habit to build
Now the tip. Fake delivery texts and emails are common, and they usually say there's a problem with your parcel and you need to pay a small fee or click a link to rearrange it.
They work because they arrive when you're busy or expecting something. So here's the habit. If a message asks you to pay a fee or click a link about a delivery, don't use that link. Open the courier's own app or website yourself, in a fresh tab, and check your tracking there.
If there's a genuine problem, it will show up. If it doesn't, the message was fake.
Today's takeaway
If you get a delivery message with a link or a fee, don't tap it. Go straight to the courier's app or website and check there yourself.
Simple, calm, and it works. We'll be back on Monday with the full show.
Related reading