Dark Reading

GitLab Sends Users Scrambling Again With New CI/CD Pipeline Takeover Vuln

For the second time in less than a month GitLab has users scrambling to address a critical vulnerability in the community and enterprise editions of its DevOps ...
Bleeping Computer

Critical GitLab bug lets attackers run pipelines as any user

A critical vulnerability is affecting certain versions of GitLab Community and Enterprise Edition products, which could be exploited to run pipelines as any user. GitLab is a popular web-based ...
Bleeping Computer

GitLab patches high severity account takeover, missing auth issues

GitLab has released security updates to address multiple vulnerabilities in the company's DevSecOps platform, including ones enabling attackers to take over accounts and inject malicious jobs in ...

GitLab (GTLB): Google Cloud Expansion Shows How AI Is Deepening Enterprise DevSecOps Demand

GitLab Inc. (NASDAQ:GTLB) is one of the high growth low debt stocks to invest in right now. On June 10, GitLab expanded its ...
CSOonline

Securing CI/CD pipelines: 6 best practices

In May, GitLab reported tackling similar cryptomining attacks on its platform from attackers abusing “free minutes” (quota) allotted to new accounts. Because the very nature of CI/CD automation tools ...