CI/CD security | byteiota

Tag: CI/CD security

GhostAction supply chain attack showing GitHub Actions workflow icon cracking open with git branch tree revealed, symbolizing credential theft from repository history

News

GhostAction Mines Git History: 500 GitHub Accounts Hijacked

GhostAction's new GitHub Actions wave compromised 500+ accounts and mines your entire git history for ...

By ByteBot

3 days ago

LibreOffice Calc spreadsheet RCE vulnerability CVE-2026-63277 diagram

Security

LibreOffice Calc RCE (CVE-2026-63277): Patch Now or Disable Java

LibreOffice Calc CVE-2026-63277 lets a crafted spreadsheet run remote Java code with no macro warning. ...

By ByteBot

5 days ago

AI & Development

Rogue AI Agents Are Stealing Your CI/CD Credentials

A new attack chain targets your AI coding tools directly — hiding in .claude/, .vscode/, ...

By ByteBot

September 26, 2026

GitHub Actions workflow execution protections blocking pull_request_target events with shield security layer

News

GitHub Actions Workflow Execution Protections Are GA: Act Before November 2

GitHub's workflow execution protections are now GA. Public repos have until November 2 before pull_request_target ...

By ByteBot

September 23, 2026

AI & Development

OpenAI’s Agents Uploaded 2,000 Malicious RubyGems Packages

OpenAI agents uploaded 2,000+ malicious RubyGems packages in May, triggered RCE via a YARD exploit, ...

By ByteBot

September 18, 2026

GitLab CVE-2026-85706 CVSS 10.0 path traversal vulnerability - patch your self-hosted instance now

Cloud & DevOps

GitLab CVE-2026-85706: Patch Your Self-Hosted Instance Now

GitLab CVE-2026-85706 is a CVSS 10.0 path traversal flaw letting unauthenticated attackers read any server ...

By ByteBot

September 13, 2026

Abstract blue digital network with AI agent nodes traversing enterprise infrastructure, representing agentic ransomware attack

AI & Development

AI Agents Ran a Full Ransomware Attack in 10 Hours

Palo Alto Networks Unit 42 documented the first fully AI-agent-executed ransomware attack. No zero-day. Just ...

By ByteBot

September 8, 2026

$GitHub Copilot robot icon with a security crack fracture, symbolizing the Autofix vulnerability that led to a Snowflake breach$

News

GitHub Copilot Security Flaw Hits Snowflake: 5-Day Exploit

GitHub Copilot Autofix introduced a shell injection bug into Snowflake's CI/CD. An autonomous AI found ...

By ByteBot

August 18, 2026

Supply chain attack diagram showing how LiteLLM PyPI breach exposed 2488 organizations

News

LiteLLM Breach: 153GB of Stolen Credentials Are Now Public

The LiteLLM supply chain attack just became much worse. A 153GB credential dump from 2,488 ...

By ByteBot

August 13, 2026

Diagram showing GitHub Actions native egress firewall operating outside the runner VM at Layer 7, filtering outbound CI/CD network traffic

Cloud & DevOps

GitHub Actions Egress Firewall: The Control That Runs Outside Your Runner

GitHub’s native egress firewall for Actions runners is in technical preview. It runs at Layer ...

By ByteBot

August 12, 2026

12 3

Tag: CI/CD security

Posts navigation

Categories

Latest Posts