Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
GitLab Email Token Lets Attackers Push Code to Main and Execute CI/CD Jobs
6 sources 4 min
Critical GitLab Bugs Let Attackers Execute Code Through Malicious CI/CD Regex
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
in the wild 15 min
GitHub App keys can still enable takeovers long after they are forgotten
2 sources 4 min
GitHub Actions leaking secrets when Miri output is cached
4 min
Multiple vulnerabilities in Jenkins plugins
1
Jenkins Security Advisory 2026-09-16
1
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
in the wild 4 min
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
in the wild 2 min1
Hackers Exploit JFrog Artifactory Flaws to Bypass Authentication and Gain Admin Access
in the wild 5 min2
Critical Security Issue Affecting TeamCity On-Premises (CVE-2026-63077 ...
4 min
Product showcase: Doppler secures secrets for humans, pipelines, and AI agents
4 min
Jenkins security advisory (AV26-877)
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
in the wild 11 min1
AI agents carried out every step of this ransomware attack – then left the victim an 80-page security audit
in the wild 2 min1
Jenkins Security Advisory 2026-09-02
1
Australia Warns of Active Exploitation of Critical TeamCity Server Flaw
in the wild1
Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
in the wild1
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
3 min1