Security News CISA says GitLab account takeover bug is actively exploited in attacks BleepingComputer Daniel Bender May 1, 2024 CISA warned today that attackers are actively exploiting a maximum-severity GitLab vulnerability that allows them to take over accounts via password resets.