A sandbox is only as closed as what an AI agent can reach
Stuck in an evaluation with no way out, an AI agent escaped in an hour through the one service on its allowlist. Here's the gap that opened.
Read PostSecurity Labs
Learn about cybersecurity trends, best practices, and third-party threats to secure your code and digital infrastructure.
Featured post
Recent posts
Security Labs
Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
GitLab’s Vulnerability Research team has uncovered a new Python supply chain attack targeting PyPI, deploying the Shai-Hulud worm to steal credentials from CI/CD systems.
Security Labs
How to detect and prevent Contagious Interview IDE attacks
Learn how we built custom controls that detect and prevent malware campaigns like those used for Contagious Interview and how to deploy them in your environment.
Security Labs
Build an automated detection testing framework with GitLab CI/CD and Duo
Learn how GitLab's Signals Engineering team built the WATCH framework to continuously validate our security monitoring pipeline.
Security Labs
Pipeline security lessons from March supply chain incidents
Learn how centralized pipeline policies can detect and block the patterns behind a series of recent attacks.
Security Labs
Automating detection gap analysis with GitLab Duo Agent Platform
Learn how GitLab's Signals Engineering team uses our AI platform to automatically surface detection gaps from security incidents — no manual review required.
Security Labs
How GitLab built a security control framework from scratch
GitLab's Security Compliance team created a custom control framework to scale across multiple certifications and products — here's why and how you can, too.
Security Labs
GitLab Threat Intelligence Team reveals North Korean tradecraft
Gain threat intelligence about North Korea’s Contagious Interview and fake IT worker campaigns and learn how GitLab disrupted their operations.
