Critical GitLab Bug Threatens Software Development Pipelines

June 28, 2024 at 04:52PM A critical GitLab vulnerability (CVE-2024-5655) allows an attacker to run a pipeline as another user. This affects versions 15.8 to 16.11.5 and 17.0 to 17.1.1. The updates address 14 security issues, with one critical, 9 medium, and 3 high severity. Exploiting this vulnerability poses a compliance risk and potential revenue … Read more

Synopsys Sells Software Integrity Business in $2.1 Billion Deal

May 6, 2024 at 11:09AM Synopsys is selling its Software Integrity Group to private equity firms Clearlake Capital and Francisco Partners in a $2.1 billion deal. The business will become an independent application security testing software provider with the existing management team leading the new company. Synopsys plans to focus on its core design and … Read more