A widely used GitHub Action, actions-cool/issues-helper, has been compromised in a supply chain attack that exposes sensitive CI/CD secrets to an attacker-controlled domain. The attack hinges on a subtle but powerful manipulation of Git tags. Instead of altering the visible commit history, the attacker moved all release tags to an “imposter commit” identified as 1c9e803, which does […]
The post Compromised GitHub Action Steals Workflow Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Startup OMass Secures $310M to Advance Drug for Rare Endocrine Disorder
OMass’s molecule is vying to become an alternative to a Neurocrine Biosciences drug that is currently the only FDA-approved therapy for congenital adrenal hyperplasia. But
