GitLab

GitLab Updates Resolve Critical Pipeline Execution Vulnerability

GitLab, Vulnerabilities, vulnerability /

GitLab Updates Resolve Critical Pipeline Execution Vulnerability 2024-09-13 at 12:16 By Ionut Arghire GitLab has released security updates to resolve multiple vulnerabilities in GitLab CE/EE, including a critical-severity pipeline execution flaw. The post GitLab Updates Resolve Critical Pipeline Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original […]

GitLab Updates Resolve Critical Pipeline Execution Vulnerability Read More »

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

cybersecurity, DevOps, DevSecOps, GitHub, GitLab, GitProtect.io, monitoring, News, penetration testing, Ransomware, report, social engineering, vulnerability management /

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise 2024-08-07 at 06:01 By Help Net Security Outages, human errors, cyberattacks, data breaches, ransomware, security vulnerabilities, and, as a result, data loss are the reality that DevSecOps teams have to face every few days, according to GitProtect.io. DevSecOps The possibility to integrate security […]

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise Read More »

GitLab Ships Update for Critical Pipeline Execution Vulnerability

CVE-2024-5655, CVE-2024-6385, GitLab, Supply Chain Security, Vulnerabilities /

GitLab Ships Update for Critical Pipeline Execution Vulnerability 2024-07-11 at 18:01 By Ionut Arghire GitLab issues an advisory for a critical-severity vulnerability that allows an attacker to trigger a pipeline as another user. The post GitLab Ships Update for Critical Pipeline Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

GitLab Ships Update for Critical Pipeline Execution Vulnerability Read More »

GitLab Security Updates Patch 14 Vulnerabilities

GitLab, Vulnerabilities /

GitLab Security Updates Patch 14 Vulnerabilities 2024-06-27 at 17:01 By Ionut Arghire GitLab CE and EE updates resolve 14 vulnerabilities, including a critical- and three high-severity bugs. The post GitLab Security Updates Patch 14 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

GitLab Security Updates Patch 14 Vulnerabilities Read More »

GitLab unveils AI capabilities to help organizations better secure their software

GitLab, Industry news /

GitLab unveils AI capabilities to help organizations better secure their software 2024-05-17 at 10:01 By Industry News GitLab announced new innovations across the platform to streamline how organizations build, test, secure, and deploy software. Introducing GitLab Duo Enterprise GitLab Duo Enterprise, a new end-to-end AI add-on, combines the developer-focused AI capabilities of GitLab Duo Pro—organizational […]

GitLab unveils AI capabilities to help organizations better secure their software Read More »

1,400 GitLab Servers Impacted by Exploited Vulnerability

exploited, GitLab, Vulnerabilities /

1,400 GitLab Servers Impacted by Exploited Vulnerability 2024-05-02 at 15:16 By Ionut Arghire CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched. The post 1,400 GitLab Servers Impacted by Exploited Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

1,400 GitLab Servers Impacted by Exploited Vulnerability Read More »

Self-managed GitLab installations should be patched again (CVE-2024-0402)

DevOps, Don't miss, GitLab, Hot stuff, News, security update, software development, vulnerability /

Self-managed GitLab installations should be patched again (CVE-2024-0402) 2024-01-30 at 14:02 By Zeljka Zorz Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has patched a critical vulnerability (CVE-2024-0402) in GitLab CE/EE again and is urging users to update their installations immediately. GitLab Inc. operates […]

Self-managed GitLab installations should be patched again (CVE-2024-0402) Read More »

Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug

GitLab, Vulnerabilities, vulnerability /

Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug 2024-01-25 at 15:46 By Ionut Arghire Over 5,000 GitLab servers have yet to be patched against CVE-2023-7028, a critical password reset vulnerability. The post Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Thousands of GitLab Instances Unpatched Against Critical Password Reset Bug Read More »

GitLab Patches Critical Password Reset Vulnerability

GitLab, Vulnerabilities, vulnerability /

GitLab Patches Critical Password Reset Vulnerability 2024-01-15 at 13:46 By Ionut Arghire GitLab has resolved a critical authentication vulnerability allowing attackers to hijack password reset emails. The post GitLab Patches Critical Password Reset Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

GitLab Patches Critical Password Reset Vulnerability Read More »

Balancing AI’s promise with privacy and intellectual property concerns

Artificial Intelligence, automation, Cisco, Cybersixgill, Devo Technology, Don't miss, Enea, Entrust, GitLab, Immuta, News, NTT, Osterman Research, Perception Point, report, Snow Software, survey, Wallaroo.AI, WorkFusion /

Balancing AI’s promise with privacy and intellectual property concerns 20/12/2023 at 07:31 By Help Net Security Organizations increasingly integrate AI technologies into their cybersecurity architectures to enhance detection, response, and mitigation capabilities. One of the key strengths of AI in cybersecurity lies in its ability to predict and prevent attacks before they occur. Powered by […]

Balancing AI’s promise with privacy and intellectual property concerns Read More »

GitLab updates Duo to enhance security and efficiency throughout SDLC

GitLab, Industry news /

GitLab updates Duo to enhance security and efficiency throughout SDLC 09/11/2023 at 17:31 By Industry News GitLab has unveiled updates to GitLab Duo, the company’s suite of AI capabilities, including the beta of GitLab Duo Chat available in the GitLab 16.6 November product release, and the general availability of GitLab Duo Code Suggestions in the […]

GitLab updates Duo to enhance security and efficiency throughout SDLC Read More »

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009)

DevOps, Don't miss, GitLab, Hot stuff, News, open source, security update, vulnerability /

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009) 22/09/2023 at 13:31 By Helga Labus GitLab has fixed a critical vulnerability (CVE-2023-5009) in the Enterprise Edition (EE) and Community Edition (CE) of its widely used DevOps platform. They flaw may allow a threat actor to abuse scan execution policies to run pipelines as another user. About the […]

GitLab fixes critical vulnerability, patch now! (CVE-2023-5009) Read More »

GitLab Patches Critical Pipeline Execution Vulnerability

GitLab, Vulnerabilities /

GitLab Patches Critical Pipeline Execution Vulnerability 20/09/2023 at 15:31 By Ionut Arghire GitLab has released security updates to address a critical-severity vulnerability allowing an attacker to run pipelines as another user. The post GitLab Patches Critical Pipeline Execution Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

GitLab Patches Critical Pipeline Execution Vulnerability Read More »

Privacy concerns cast a shadow on AI’s potential for software development

451 Research, Artificial Intelligence, cybersecurity, data, GitLab, News, report, software development, survey /

Privacy concerns cast a shadow on AI’s potential for software development 13/09/2023 at 06:01 By Help Net Security Organizations are optimistic about AI, but AI adoption requires attention to privacy and security, productivity, and training, according to GitLab. “The transformational opportunity with AI goes way beyond creating code,” said David DeSanto, CPO, GitLab. “According to […]

Privacy concerns cast a shadow on AI’s potential for software development Read More »

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator

Crypter Ransomware, cybercrime, Darkflow Software, data breach, Data leak, Discord, Encryption, Enlisted, Gaijin Entertainment, GitHub, GitLab, GUI, JSON, Malware, Mutex, phishing, Python, Ransomware, Russia, Threat Intelligence, WannaCry 3.0, WannaCry 3.0 Crypter, Windows /

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator 13/06/2023 at 19:21 By cybleinc CRIL analyzes WannaCry-Imitator Ransomware, a phishing gaming site targeting the Russian Gaming community The post Threat Actor Targets Russian Gaming Community With WannaCry-Imitator appeared first on Cyble. This article is an excerpt from Cyble View Original Source

Threat Actor Targets Russian Gaming Community With WannaCry-Imitator Read More »

oak9 adds GitLab support to alert developers of security gaps

GitLab, Industry news, oak9 /

oak9 adds GitLab support to alert developers of security gaps 13/06/2023 at 19:21 By Industry News Open-source code repositories have become integral to developers, enabling them to work faster and more flexibly with the added benefit of collaborating with other developers. While these platforms encourage agility, they can also create security concerns. oak9 has added […]

oak9 adds GitLab support to alert developers of security gaps Read More »

GitLab Security Update Patches Critical Vulnerability

GitLab, Vulnerabilities, vulnerability /

GitLab Security Update Patches Critical Vulnerability 25/05/2023 at 14:05 By Ionut Arghire GitLab CE/EE version 16.0.1 patches a critical arbitrary file read vulnerability tracked as CVE-2023-2825. The post GitLab Security Update Patches Critical Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

GitLab Security Update Patches Critical Vulnerability Read More »

Citrix Users at Risk: AresLoader Spreading Through Disguised GitLab Repo

AiD Locker Ransomware, AresLoader, Aurora Stealer, C, Citrix, cybercrime, fake app, GitLab, Hacktivism, IceID, Laplas Clipper, Lumma Stealer, LummaC2 Stealer, MaaS, Malware, Malware-as-a-Service, Repository, StealC, SystemBC RAT, Telegram, Threat Intelligence /

Citrix Users at Risk: AresLoader Spreading Through Disguised GitLab Repo 07/05/2023 at 18:24 By cybleinc CRIL analyzes the spread of AresLoader via a disguised GitLab repo, delivering multiple malware variants to victim systems. The post Citrix Users at Risk: AresLoader Spreading Through Disguised GitLab Repo appeared first on Cyble. This article is an excerpt from […]

Citrix Users at Risk: AresLoader Spreading Through Disguised GitLab Repo Read More »

Scroll to Top