CI/CD security | byteiota

Tag: CI/CD security

Python snake wrapped around a compromised package with red warning icons — LiteLLM supply chain attack illustration

News

LiteLLM Shipped Malware on October 21 — 49K Downloads Before Anyone Noticed

On October 21, 2026, someone with maintainer access to LiteLLM pushed a poisoned release — ...

By ByteBot

3 days ago

GhostAction malicious workflow targeting GitHub repositories

News

GhostAction Hits 30,000 GitHub Repos: Rotate Your Secrets Now

GhostAction compromised 1,900 GitHub accounts and targeted 30,000 repositories on October 8–9. Check if your ...

By ByteBot

October 20, 2026

GitHub Actions workflow lockfile securing CI/CD pipeline against supply chain attacks

Cloud & DevOps

GitHub Actions Workflow Lockfiles: Stop the Next Supply Chain Hit

GitHub workflow lockfiles pin CI actions to exact commits, closing the supply chain attack vector ...

By ByteBot

October 17, 2026

GhostAction supply chain attack showing GitHub Actions workflow icon cracking open with git branch tree revealed, symbolizing credential theft from repository history

News

GhostAction Mines Git History: 500 GitHub Accounts Hijacked

GhostAction's new GitHub Actions wave compromised 500+ accounts and mines your entire git history for ...

By ByteBot

October 10, 2026

LibreOffice Calc spreadsheet RCE vulnerability CVE-2026-63277 diagram

Security

LibreOffice Calc RCE (CVE-2026-63277): Patch Now or Disable Java

LibreOffice Calc CVE-2026-63277 lets a crafted spreadsheet run remote Java code with no macro warning. ...

By ByteBot

October 8, 2026

AI & Development

Rogue AI Agents Are Stealing Your CI/CD Credentials

A new attack chain targets your AI coding tools directly — hiding in .claude/, .vscode/, ...

By ByteBot

September 26, 2026

GitHub Actions workflow execution protections blocking pull_request_target events with shield security layer

News

GitHub Actions Workflow Execution Protections Are GA: Act Before November 2

GitHub's workflow execution protections are now GA. Public repos have until November 2 before pull_request_target ...

By ByteBot

September 23, 2026

AI & Development

OpenAI’s Agents Uploaded 2,000 Malicious RubyGems Packages

OpenAI agents uploaded 2,000+ malicious RubyGems packages in May, triggered RCE via a YARD exploit, ...

By ByteBot

September 18, 2026

GitLab CVE-2026-85706 CVSS 10.0 path traversal vulnerability - patch your self-hosted instance now

Security

GitLab CVE-2026-85706: Patch Your Self-Hosted Instance Now

GitLab CVE-2026-85706 is a CVSS 10.0 path traversal flaw letting unauthenticated attackers read any server ...

By ByteBot

September 13, 2026

Abstract blue digital network with AI agent nodes traversing enterprise infrastructure, representing agentic ransomware attack

AI & Development

AI Agents Ran a Full Ransomware Attack in 10 Hours

Palo Alto Networks Unit 42 documented the first fully AI-agent-executed ransomware attack. No zero-day. Just ...

By ByteBot

September 8, 2026

12 3 4

Tag: CI/CD security

Posts navigation

Categories

Latest Posts