[October Vulnerability Summary] PHP, Node.js, Java, and GitLab Release Patches One After Another | How to Prepare for the Era of AI-Driven Vulnerability Discovery

Hello, this is the WEEL Media Department!Between October 20th and 21st, PHP, Node.js, Java, and GitLab—software widely used ...

CSIRT Work Memo | Scared of the Vulnerability Rush! A Summary of Checkpoints for PHP, GitLab, Java, and Python

Hello everyone! This is Hatchobori-chan.From yesterday to today, various vulnerability reports have been flying in.GitLab, ...
BleepingComputer

GitLab warns of critical RCE vulnerability in AI Gateway service

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. AI Gateway is a service that gives ...
InfoWorld

GitLab introduces AI agent-enabled devsecops platform

Moving forward on AI, GitLab is offering a public beta of GitLab Duo Agent Platform, a devsecops orchestration platform intended to unlock asynchronous collaboration between developers and AI agents.
BleepingComputer

CISA: Hackers now exploit max severity GitLab flaw in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are now exploiting a maximum-severity GitLab vulnerability in attacks. GitLab's DevSecOps platform is used by over ...