Asi Greenholts

GitHub Actions worm compromises GitHub repositories via action dependencies in a novel attack vector allowing attackers to distribute malware across repositories, research shows.

Jenkins’ default configurations can leave your CI/CD pipelines open to attack. Learn five practical tips to help you define secure configurations in your organization.

Learn how attackers abuse repository webhooks to gain access to Jenkins instances and discover CI/CD security tips to protect your pipelines from attack.