Maximum-severity GitLab flaw is under active exploitation. US sanctions Russians and North Koreans for alleged roles in fraudulent IT worker operations.