PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Preventing fallout from your CI/CD platform being hacked

aikido.dev | blog | #cloud | #supply-chain | #cloud-security | #aws | #credential-theft | #github-actions | #secrets-management | #cicd | #supply-chain-security | #circleci | #cicd-security | #breach-response
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CI/CD tools are prime targets because they store cloud API secrets; breaches at CircleCI, GitHub Actions, GitLab, and Jenkins recur regularly. Aikido outlines defenses that limit the fallout.
Published
Collected

Related coverage

blog · wiz.io
LiteLLM Compromised, Steals Credentials
# LiteLLM Compromised, Steals Credentials In a new incident, a malicious version (1.107.0) of the LiteLLM package was uploaded to PyPI and Docker on October 21. The malicious version includes a...
blog · wiz.io
The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave
Wiz attributes the cross-ecosystem campaign to TeamPCP: @antv npm packages, actions-cool/issues-helper GitHub Action, and a VS Code extension steal credentials and drop a GitHub-polled backdoor.
blog · vercel.com
Mitigating Denial of Wallet risks with Vercel
Protect against Denial of Wallet (DoW) attacks with Vercel. DoW exploits cloud scalability to inflate costs. Vercel provides solutions like budget alerts, spend limits, and anomaly detection to safeguard workloads and maintain financial stability.
blog · wiz.io
A security community success story of mitigating a misconfiguration
The story of fixing a common misconfiguration: GitHub Actions OIDC trust policies missing their 'sub' condition let anyone assume AWS roles, until coordinated research pushed defaults to change.
blog · vercel.com
Introducing Vercel Firewall and Vercel Secure Compute
Vercel Secure Compute and Vercel Firewall for enhanced protection of your applications on the frontend cloud
incident · aikido.dev
Get the TL;DR: tj-actions/changed-files Supply Chain Attack
The tj-actions/changed-files GitHub Action, which is currently used in over 23,000 repositories, has been compromised, leaking secrets through workflow logs and impacting thousands of CI pipelines.
Back