A widely used GitHub Action, actions-cool/issues-helper, has been compromised in a supply chain attack that exposes sensitive CI/CD secrets to an attacker-controlled domain. The attack hinges on a subtle but powerful manipulation of Git tags. Instead of altering the visible commit history, the attacker moved all release tags to an “imposter commit” identified as 1c9e803, which does […]
The post Compromised GitHub Action Steals Workflow Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.
Hackers Bypass Security Tools to Target Users Directly – Infosecurity Magazine
Hackers Bypass Security Tools to Target Users Directly Infosecurity Magazine
