Two more GitHub Actions workflows have become the latest to be compromised by credential-stealing malware by a threat actor ...
Attackers have hijacked 75 of 76 GitHub Actions tags for Aqua Security's Trivy scanner, distributing credential-stealing ...
Security researcher finds related attacks and dubbed them Clone2Leak This allowed threat actors to leak credentials through Git's credential helper Patches are already available, so update now A ...
If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...
Two recent security issues with Git and its related tools have been fixed, so users should update their software. The vulnerabilities, CVE-2024-53263 and CVE-2024-53858, involve issues with credential ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results