AI synthesis Cordyceps CI/CD workflow flaws allow attackers to hijack open-source supply chains, exposing 300+ GitHub repos and potentially millions more, researchers warn.
What changed
Every report remains linked to its original publisher.
The security defects allow unauthenticated users to take control of the open source software supply chain. The post Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking appeared first on SecurityWeek.
Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has been codenamed Cordyceps by Novee Security. The issue can allow full attacke...