Get the latest tech news
Maximum-severity GitLab flaw allowing account hijacking under active exploitation | The threat is potentially grave because it could be used in supply-chain attacks
The threat is potentially grave because it could be used in supply-chain attacks.
With the ability to access them and surreptitiously introduce changes, attackers could sabotage projects or plant backdoors that could infect anyone using software built in the compromised environment. Advertisement According to Internet scans performed by security organization Shadowserver, more than 2,100 IP addresses showed they were hosting one or more vulnerable GitLab instances. The agency made no mention of MFA, but any GitLab users who haven’t already done so should enable it, ideally with a form that complies with the FIDO industry standard.
Or read this on r/technology