ZDNet

GitLab fixes security issue that let anyone hijack custom domains

A security researcher hijacked hundreds of GitLab domains in just a few seconds by exploiting a weakness in how the company handles domain verification -- a security issue that the company has now ...
TechCrunch

GitLab’s new security feature uses AI to explain vulnerabilities to developers

Developer platform GitLab today announced a new AI-driven security feature that uses a large language model to explain potential vulnerabilities to developers, with plans to expand this to ...
Bleeping Computer

GitLab urges users to install security updates for critical pipeline flaw

GitLab has released security updates to address a critical severity vulnerability that allows attackers to run pipelines as other users via scheduled security scan policies. GitLab is a popular ...
Bleeping Computer

GitLab 'strongly recommends' patching max severity flaw ASAP

GitLab has released an emergency security update, version 16.0.1, to address a maximum severity (CVSS v3.1 score: 10.0) path traversal flaw tracked as CVE-2023-2825. GitLab is a web-based Git ...
ITWire

GitLab 16 brings wide range of new security, compliance, AI, capabilities to ship software faster

DevSecOps platform GitLab has announced the launch of GitLab 16 with new DevSecOps platform-wide capabilities available to customers now. The new GitLab 16 features provide a range of capabilities in ...
Nasdaq

GitLab Appoints Josh Lemos as Chief Information Security Officer

Former Block, ServiceNow and Cylance security leader joins to lead privacy-first security strategy for the most comprehensive AI-powered DevSecOps platform in the market SAN FRANCISCO, June 13, 2023 ...
InfoQ

GitLab Launches Browser-Based Dynamic Application Security Testing (DAST) Scan

GitLab has recently introduced a browser-based Dynamic Application Security Testing (DAST) feature in version 16.4 (or DAST 4.0.9). This development is part of GitLab's ongoing efforts to enhance ...