Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR

Summary

Wiz Red Agent found a GitHub Actions injection in a Snowflake repo five days after a Copilot-reviewed PR introduced it, missed by GitHub's scanner; a stolen token hit internal Jira. Fixed same day.
Published
Collected

original ↗

Related coverage

back