SecOps @ GitLab - I post about #DFIR #Cloud #AI #Automation #DevSecOps and occasionally #Fitness

Pure Michigan
Joined June 2014
Matt Coons retweeted
We announced next-gen SCM at Transcend in June, with Nick from Anthropic on stage. Their new post shows why: merges went from 2,500 to 30,000+ a day in four months. They built Scion for their unique needs, enterprises will need that scale on Git, governed end to end, cloud or air-gapped, without migrating their code, CI and compliance workflows to get it. That's what we're building. Latest: about.gitlab.com/blog/scalin…
New on our Engineering blog: Creating in-house source control. In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale. Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: anthropic.com/engineering/re…
11
12
5
66
8,782
Matt Coons retweeted
Today was a historic day in the world of git. The largest service provider took out millions? of users around the world with a service outage. The newest entrant to the market released a private beta. Meanwhile GitLab continues to offer the only credible, cloud and model neutral platform that is trusted by millions, including the majority of fortune 100, governments and start-ups around the world. And here is why: open source, cloud and model neutral, leaving you in control of your uptime and your IP. DM me if you're interested in moving, we help customers switch every day!
15
11
3
141
27,405
Matt Coons retweeted
Devs, you were right all along: about.gitlab.com/switch/ GitLab delivers more than DevSecOps and AI, we give you independence. DM me to get started on your path back to freedom.
14
3
3
115
24,021
Matt Coons retweeted
GitLab Duo CLI is now out in public beta.
MCP gives external AI tools a window into your platform. GitLab Duo CLI gives you an AI agent that lives inside it. Native platform and repo access, purpose-built agents, platform-level security, headless mode for CI/CD. Works on self-managed and air-gapped too. No cloud dependency. about.gitlab.com/blog/gitlab…
1
4
2
28
10,124
How do you catch a DPRK actor you ask? Here are a few things to think about; 1. They love to use a VPN when applying for jobs. Check your HR system.
24
169
26
1,500
210,784
Welcome to the era of the token. In the past, attackers had to breach networks, bypass security controls, escalate privileges, and evade detection just to reach confidential data. Now? A single OAuth authorization - granted with one click - can hand over access to emails, files, and cloud services. No need to dump credentials, bypass EDR, or move laterally. Just steal a token and walk right in. The cloud-first world has made security more convenient - but also far more fragile.
I just fell for one of the best scams I've seen on X. Here's what you need to know (and how to avoid it):
60
195
14
852
137,966
Matt Coons retweeted
The @Lions secure a spot in the #NFLPlayoffs 🔥 #EasyToCelebrate | @budlight
300
2,944
289
19,280
811,064
Matt Coons retweeted
GitLab Duo 🤝Amazon Q Today, we’re announcing a joint offering with @awscloud that brings together GitLab Duo with Amazon Q. Learn more here: bit.ly/4eUcfb1
15
2
44
6,304
What people often overlook in #DetectionEngineering is that there’s no "one-size-fits-all" rule to detect a threat. It depends on your goals. How specific should the rule be? Are you tracking a threat actor, detecting the tool/malware, or focusing on the technique? Should it be based on code, content, form, or metadata? Just like in art, you can create an abstract, impressionist, or realistic painting of the same subject, and all can be masterpieces in their own right
7
123
506
40,332
Hit a deadlift PR with #overclock 🔥375lbs #wehackhealth
3
1
4
690
It’s here 🔥🔥🔥 #wehackhealth
2
2
6
561
Love this! I ordered my pre workout - can’t wait for it to get here!
Excited to announce the launch of our pre-workout and protein with @bencanning87. Two years in the making. The wait is over. Thank you all for the support and patience as we navigate a new chapter in the Hacking Your Health movement. hackingyourhealth.com #wehackhealth
2
2
6
1,039
This this! The Great Lakes are just as awesome - or even better than the ocean!
I just think people who haven't been to a Great Lake don't understand. This is an unfiltered shot of Lake Michigan.
1
1
1
232
This story is just mind-blowing. Not only the scale ($11B in three years) and the scope (they sell cattle prods to keep slave labourers in check) but mostly for the fact it's operating almost completely in public and has links to Cambodia's ruling family....
Crypto-tracing firm Elliptic found a Cambodian online market offering every product and service for the crypto scam industry: Money laundering, victim data, shackles for slave labor. It's done $11B in sales and is linked to the country's ruling family. wired.com/story/pig-butcheri…
3
67
5
131
48,485
We’re on the list!
📢 We announced voluntary commitments by 68 leading technology manufacturers to a Secure by Design pledge to design products with greater security built in. Join us by signing our #SecurebyDesign pledge today! 👉cisa.gov/securebydesign/pled…
151
Matt Coons retweeted
⚠️ We are collaborating with partners to respond to a recent compromise—discovered by independent security researchers—impacting Sisense. For more info, check out: cisa.gov/news-events/alerts/…
6
78
12
111
60,938