Sourced updates on GitLab, JFrog, Microsoft, supply-chain security and licensing for African buyers.https://spreeze.co.za/en-zahttps://spreeze.co.za/news/2026-10-13-gitlab-critical-patch-19-4-2/https://spreeze.co.za/news/2026-10-13-gitlab-critical-patch-19-4-2/Self-managed GitLab on 19.2, 19.3 or 19.4 is exposed to a flaw rated 10.0 that could let an unauthenticated attacker run code on the server. GitLab.com is already patched and Dedicated needs no action, so the work sits with self-managed teams.Tue, 13 Oct 2026 00:00:00 GMThttps://spreeze.co.za/news/2026-10-13-jfrog-equation-of-compromise-npm-campaign/https://spreeze.co.za/news/2026-10-13-jfrog-equation-of-compromise-npm-campaign/Popularity is no longer a safe signal: this campaign faked millions of npm downloads to look trustworthy. Teams that pull packages straight from public registries need curation and malicious-package scanning in front of developers and build agents.Tue, 13 Oct 2026 00:00:00 GMThttps://spreeze.co.za/news/2026-10-13-office-ltsc-2021-end-of-support/https://spreeze.co.za/news/2026-10-13-office-ltsc-2021-end-of-support/Organisations still on perpetual Office 2021 will stop receiving security fixes. Staying put adds security and compliance risk, so buyers need to choose between Microsoft 365 subscriptions and the 2024 LTSC versions.Tue, 13 Oct 2026 00:00:00 GMThttps://spreeze.co.za/news/2026-10-13-microsoft-365-copilot-business-usage-billing-default/https://spreeze.co.za/news/2026-10-13-microsoft-365-copilot-business-usage-billing-default/Copilot Business buyers will get pay-as-you-go usage enabled out of the box. Without spending policies, extra AI usage can appear on the bill on top of the licence, so finance and IT need to agree limits before December.Tue, 13 Oct 2026 00:00:00 GMT