Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour

'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'

Supply Chain Security
Read the full article at The Register - Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
CSO Online

PHP2Shell will persist in enterprise environments for years

Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, and they came with the familiar warning to patch immediately. But CISOs will have to deal with the long tail of these flaws for years due to widespread PHP integration into third-party products with patching cycles customers don’t control. NAS devices, firewalls, VPN gateways, printers, building mana…