ci-cd
45 articles with this tag
HIGH
HIGH
INFO
HIGH
CRITICAL
HIGH
CRITICAL
CRITICAL
INFO
INFO
CRITICAL
HIGH
CRITICAL
HIGH
HIGH
MEDIUM
HIGH
MEDIUM
HIGH
HIGH
HIGH
CRITICAL
HIGH
HIGH
HIGH
HIGH
HIGH
HIGH
INFO
INFO
HIGH
HIGH
CRITICAL
HIGH
HIGH
MEDIUM
INFO
HIGH
CRITICAL
INFO
CRITICAL
HIGH
HIGH
HIGH
MEDIUM
[NEU] [hoch] Jenkins: Mehrere Schwachstellen
Jenkins Multiple Vulnerabilities
Running AI agents in GitHub Actions with Docker Sandboxes
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
Unauthenticated RCE in CircleCI's MCP server: Host/Origin allowlist bypassed by any non-browser client (GHSA-xv5j-cwgj-22r4)
Over 2,500 Organizations Impacted by LiteLLM Supply Chain Attack
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
Hackers Start Exploiting Recent JetBrains TeamCity Vulnerability
Run CI/CD for millions of repos — on your platform, on Cloudflare
Docker OIDC connections for GitHub Actions available for Docker Orgs
JetBrains patches critical TeamCity flaw enabling unauthenticated code execution
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking
Securing CI/CD in an agentic world: Claude Code Github action case
Open-source CI/CD abuse detector guards against stolen credential attacks
Securing CI/CD in an agentic world: Claude Code Github action case
NuGet Code Execution As A Service
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos
Megalodon chums the waters in 5.5K+ GitHub repo poisonings
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
GitHub Actions Cache Poisoning is eating open source
Grafana Labs Says Code Breach Stemmed from TanStack Attack
Mini Shai Hulud: Compromised @antv npm packages enable CI/CD credential theft
Analyzing TeamPCP’s Supply Chain Attacks: Checkmarx KICS and elementary-data in CI/CD Credential Theft
Trusted by default: The npm attack pattern security teams miss
Mini Shai-Hulud Hits TanStack npm Packages
Build Application Firewalls Aim to Stop the Next Supply Chain Attack
Securing CI/CD for an open source project: lessons from Cilium
[NEU] [hoch] Jenkins Plugins: Mehrere Schwachstellen
SAP npm package attack highlights risks in developer tools and CI/CD pipelines
CI/CD pipeline abuse: the problem no one is watching
Week in review: Claude Mythos finds 271 Firefox flaws, Vercel breach
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain ...
SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines
SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines
How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
Plumber: Open-source scanner of GitLab CI/CD pipelines for compliance gaps
Trivy vulnerability scanner backdoored with credential stealer in supply chain attack
Trivy Under Attack Again: Widespread GitHub Actions Tag Compromise Exposes CI/CD Secrets Attackers
From Scanner to Stealer: Inside the trivy-action Supply Chain Compromise
Jenkins Multiple Vulnerabilities
NCSC-2026-0093 [1.00] [M/H] Kwetsbaarheden verholpen in GitLab