DeepSeek-Reasonix: How a poisoned config can hijack an AI coding agent
GitLab's Threat Research Group found a flaw, ConfigPoisoning, that runs attacker code when a developer views a file's diff in DeepSeek-Reasonix.
Read PostSecurity Labs
Learn about cybersecurity trends, best practices, and third-party threats to secure your code and digital infrastructure.
Featured post
Recent posts
Security Labs
Critical remote code execution in vm2, a widely used Node.js sandbox library
GitLab's Threat Research Group found a critical sandbox escape in vm2 that runs attacker code using the library's own documented configuration.
Security Labs
Critical remote code execution in Serena, a popular MCP coding agent
GitLab's Threat Research Group found a critical template injection in Serena that runs attacker code the moment a developer opens a repository.
Security Labs
A sandbox is only as closed as what an AI agent can reach
Stuck in an evaluation with no way out, an AI agent escaped in an hour through the one service on its allowlist. Here's the gap that opened.
Security Labs
Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting
GitLab’s Vulnerability Research team has uncovered a new Python supply chain attack targeting PyPI, deploying the Shai-Hulud worm to steal credentials from CI/CD systems.
Security Labs
How to detect and prevent Contagious Interview IDE attacks
Learn how we built custom controls that detect and prevent malware campaigns like those used for Contagious Interview and how to deploy them in your environment.
Security Labs
Build an automated detection testing framework with GitLab CI/CD and Duo
Learn how GitLab's Signals Engineering team built the WATCH framework to continuously validate our security monitoring pipeline.
Security Labs
Pipeline security lessons from March supply chain incidents
Learn how centralized pipeline policies can detect and block the patterns behind a series of recent attacks.
