Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

CyberRisks in DevOps - staying ahead for cyber resilience & compliance

Jul 15, 2024 By GitProtect In GitProtect
Are you aware of cyber risks in DevOps and how they can impact your business? Join our host ⁠Gregory Zagraba⁠ and explore the biggest cyber threats to DevOps environments, including GitHub, GitLab, Bitbucket, and Jira with an ultimate review of the Top 2023 risks. But in order not to leave you in the crosshairs of hackers, human errors, and malicious insiders, he will also get in-depth insights on data protection, backup, Disaster Recovery, and security.
View Video
Arctic Wolf

CVE-2024-6385: Critical Unauthorized Pipeline Job Vulnerability in GitLab

Jul 12, 2024 By Andres Ramos In Arctic Wolf
On July 10, 2024, GitLab issued an advisory regarding a critical vulnerability (CVE-2024-6385) in GitLab CE/EE that had been reported to them through a bug bounty program. This vulnerability allows a threat actor to trigger a GitLab pipeline as another user under certain circumstances. A GitLab pipeline is a collection of automated processes that run in stages to build, test, and deploy code.
Read Post
foresiet

GitLab Patches Critical Vulnerability Allowing Unauthorized Pipeline Jobs

Jul 11, 2024 By Foresiet In Foresiet
GitLab has released a new series of updates to address critical security flaws in its software development platform. Among these, a severe vulnerability tracked as CVE-2024-6385 has been identified, allowing attackers to run pipeline jobs as arbitrary users. This blog will detail the nature of these vulnerabilities, their impact, and the steps GitLab has taken to mitigate them. Critical Vulnerability: CVE-2024-6385.
Read Post
jit

Announcing GitLab support: Empower developers to secure everything they code in GitLab

Jul 10, 2024 By David Melamed In Jit
Today, I’m thrilled to announce Jit’s full support for GitLab, which will significantly expand our ability to execute our mission to empower every developer to secure everything they code. This new integration will provide all of the same benefits that we’ve been delivering to our customers on GitHub for years, including: If you’re on GitLab, check out the guidelines below to quickly realize these benefits.
Read Post
gitguardian

CVE of the month, the supply chain vulnerability hidden for 10 years CVE-2024-38368

Jul 3, 2024 By Mackenzie Jackson In GitGuardian
For over a decade, a massive vulnerability that could have unleashed a huge supply chain attack lay dormant. Luckily the good guys found it first or so it seems. This month we are taking a look at CVE-2024-38368.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.