Tag: CI/CD Security

GitHub Supply Chain Attack Campaign Expands Through Stolen Developer Credentials

Risk & Resilience
The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.

Next.js Patch Addresses Critical Remote Code Execution And Service Disruption Risks

Risk & Resilience
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.

Six Proto6 Vulnerabilities In Protobuf.js Put Node.js Applications At Risk Of RCE And DoS Attacks

Risk & Resilience
Cybersecurity researchers have identified six vulnerabilities in protobuf.js that could expose Node.js applications to remote code execution and denial of service attacks, impacting cloud services, AI systems, and CI/CD pipelines.

Claude Code GitHub Action Flaw Exposed Public Repositories To Repository Hijacking Risks

Risk & Resilience
A security flaw in Anthropic’s Claude Code GitHub Action allowed attackers to potentially hijack public repositories through a single malicious GitHub issue.

Miasma Supply Chain Attack Compromises Red Hat npm Packages To Steal Credentials And Spread Self Propagating Malware

Risk & Resilience
A new supply chain attack called Miasma has compromised Red Hat npm packages to steal credentials, target CI/CD environments, and deploy a self propagating malware campaign affecting developers and cloud systems.

Compromised GitHub Action Tags Used To Steal CI/CD Credentials In Software Supply Chain Attack

Risk & Resilience
Threat actors compromised popular GitHub Actions workflows to exfiltrate CI/CD credentials through malicious code, raising concerns around software supply chain security and GitHub repository integrity.

Recent articles

spot_img