Intro into CI/CD research that has lead to critical vulnerabilities in Google, Meta, Microsoft, Blockchains, and more.

johnstawinski.com

cross-posted to:
[email protected]
secops

Intro into CI/CD research that has lead to critical vulnerabilities in Google, Meta, Microsoft, Blockchains, and more.

johnstawinski.com

@repostbot33B to

netsecEnglish • 11 months ago

cross-posted to:
[email protected]
secops

Worse than SolarWinds: Three Steps to  Hack Blockchains, GitHub, and ML through GitHub Actions

johnstawinski.com

Six months ago, my friend and colleague Adnan Khan started researching a new class of CI/CD attacks. Adnan grasped the significance of these attacks after executing them against GitHub to gain tota…

You must log in or register to comment.

Chat

Intro into CI/CD research that has lead to critical vulnerabilities in Google, Meta, Microsoft, Blockchains, and more.

Intro into CI/CD research that has lead to critical vulnerabilities in Google, Meta, Microsoft, Blockchains, and more.

Worse than SolarWinds: Three Steps to&nbsp; Hack Blockchains, GitHub, and ML through GitHub Actions

Worse than SolarWinds: Three Steps to Hack Blockchains, GitHub, and ML through GitHub Actions