Tag: CI/CD Security
Snowflake CI workflow injection leaks Jira tokens through crafted issues
Wiz's Red Agent found a GitHub Actions injection in a Snowflake repository that exposed Jira credentials via a specially crafted…
JetBrains patches critical TeamCity bug allowing unauthenticated server takeover
CI/CD platforms have become prime targets for attackers seeking supply chain access, and JetBrains’ latest security advisory underscores the risk.
Compromised CI/CD Tool Steals Pipeline Secrets via Tag Spoofing Attack
Attackers silently redirected all version tags of a popular GitHub Action to malicious code that steals pipeline credentials from runner…