Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Code to Cloud Attacks: From Github PAT to Cloud Control Plane

wiz.io | blog | #cloud | #supply-chain | #cloud-security | #secrets | #github | #ci-cd | #pat | #wiz-cirt

Summary

Wiz CIRT reports GitHub PAT attacks escalating to cloud control-plane access: attackers enumerate Action secret names via unlogged code searches, then plant workflows that harvest CSP credentials.
Published
Collected

original ↗

Related coverage

  1. Investing Together: Wiz Defend and Google Security Operations (wiz.io)
  2. Wiz achieves GovRAMP High Authorization (wiz.io)
  3. How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign (wiz.io)
  4. CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild (wiz.io)
  5. 2025 State of Code Security: Key Trends and Risks (wiz.io)
  6. The Overlooked Attack Surface: Securing Code Repositories, Pipelines, and Developer Infrastructure (wiz.io)

back