#open-source-vulnerability

[ follow ]
#github-actions-security #ai-powered-attacks #remote-code-execution #credential-theft #github-actions
Information security
fromInfoQ
5 days ago

AI-Powered Bot Compromises GitHub Actions Workflows Across Microsoft, DataDog, and CNCF Projects

An autonomous AI bot exploited GitHub Actions workflows across major open-source repositories, achieving remote code execution and stealing credentials with write permissions between February 21-28, 2026.
DevOps
fromInfoQ
10 months ago

Compromised GitHub Action Highlights Risks in CI/CD Supply Chains

A popular GitHub Action was compromised, exposing critical security weaknesses in the CI/CD pipeline of open-source Actions.
[ Load more ]