GitLab 19.0 extends agentic AI beyond code generation into securing credentials, reviewing and merging changes, and scanning ...

GitLab has released version 19.0 of its DevSecOps platform. The new release focuses primarily on further integrating AI agents throughout the entire software development process. With this, the ...

GitLab 19.0 extends agentic AI across the full software lifecycle with its Duo Agent Platform, adds SBOM-based dependency scanning, and supports Claude Opus 4.7 and Gemini models. The release targets ...

GitLab CEO Bill Staples says enterprises’ monthly bill for developer platform services has risen from tens of dollars per seat to hundreds over the last year, and is headed toward the thousands, ...

MCP server for GitLab CI/CD. Lets an LLM agent (Claude Code, Cursor, OpenCode, DevX Agent, etc.) work with pipelines, jobs, schedules, branches, tags, merge requests and repository files. Python, ...

The CVSS‑9.3 vulnerability allows unauthenticated remote code execution on exposed Marimo servers and was exploited in the wild shortly after disclosure, Sysdig says. A critical pre-authentication ...

If you’ve worked with GitLab CI/CD, chances are you’ve come across anchors, extends, and !reference — and at some point wondered: aren’t they all doing the same thing? They’re actually quite different ...

INFOSEC IN BRIEF Switzerland’s Conference of Data Protection Officers, Privatim, last week issued a resolution calling on Swiss public bodies to avoid using hyperscale clouds and SaaS services due to ...

After scanning all 5.6 million public repositories on GitLab Cloud, a security engineer discovered more than 17,000 exposed secrets across over 2,800 unique domains. Luke Marshall used the TruffleHog ...

Fake Alibaba Labs AI SDKs hosted on PyPI included PyTorch models with infostealer code inside. With support for detecting malicious code inside ML models lacking, expect the technique to spread.

You're looking for a Jenkins alternative? That's a big ask. Jenkins is one of the most popular continuous integration and continuous delivery tools on the market today, and while nobody would assert ...

An unidentified group of threat actors orchestrated a sophisticated supply chain cyberattack on members of the Top.gg GitHub organization as well as individual developers in order to inject malicious ...