URL has been copied successfully!
‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
URL has been copied successfully!

Collecting Cyber-News from over 60 sources

‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking


Tags: , , , , ,

Novee Security reveals Cordyceps, a CI/CD vulnerability in GitHub Actions workflows that let anonymous users poison builds and expose tokens across major projects today.

First seen on hackread.com

Jump to article: hackread.com/cordyceps-ci-cd-flaw-microsoft-google-apache-repos-hijack/

Loading

Share via Email
Share on Facebook
Tweet on X (Twitter)
Share on Whatsapp
Share on LinkedIn
Share on Xing
Copy link

also interesting:

  1. ‘Cordyceps’ CI/CD Flaw Exposes Microsoft, Google, Apache Repos to Pipeline Hijacking
  2. The biggest data breach fines, penalties, and settlements so far
  3. Chromium flaw crashes Chrome, Edge, Atlas: Researcher publishes exploit after Google’s silence
  4. Chromium flaw crashes Chrome, Edge, Atlas: Researcher publishes exploit after Google’s silence