DevThe New Stackabout 1 hour ago
Cordyceps flaw shows CI/CD is attack surface
4 min read
Novee Security reported a CI/CD weakness dubbed Cordyceps that lets anyone with an unauthenticated free GitHub account hijack trusted workflows. The flaw appeared across Microsoft, Google, Apache, Python, and Cloudflare. Scanning 30,000 repositories flagged 654 as exploitable and confirmed 300 as fully exploitable.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyMicrosoft
