23,000 Repositories Exposed: Secrets Compromised via CI/CD Pipeline

Been thinking about writing this one for a while. Supply chain attacks against CI/CD pipelines have been picking up pace over the past two years and the March 2025 tj-actions incident was the one that finally made me sit down and document everything properly. This is how I think about hardening GitH

Related Stories

Azure CLI Password Spray Hits at Least 78 Microsoft Accounts in 81M+ Attempts

📰

India's Cloud Security Lapses: Authentication is Just the Tip of the Iceberg

📰

Oracle PeopleSoft Supply Chain Breach Affects Nissan and 99 Others

📰

The Supply Chain Attack Vector Everyone Is Ignoring in AI Agents