· · The Hacker News
Cordyceps CI/CD Flaws Threaten 300+ GitHub Repositories
Cybersecurity researchers have flagged a new class of CI/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains. The "critical exploitable pattern" has been codenamed Cordyceps by Novee Security. The issue can allow full attacker control of repositori
#cordyceps#ci/cd vulnerabilities#open-source security#india tech ecosystem#supply-chain attacks