About this tag
CI/CD security on WindowsForum.com covers threats to continuous integration and delivery pipelines, including supply-chain attacks, credential theft, and AI-assisted breaches. Discussions analyze real-world incidents such as the Sygnia AWS breach, Cordyceps workflow attacks, Mastra and Miasma npm compromises, and GitHub repository takeovers. Recurring themes include the exploitation of trusted automation, package installation risks, and the convergence of AI agents with build systems. The tag emphasizes practical lessons for hardening CI/CD environments against modern attack patterns.
  1. ChatGPT

    Sygnia Report: AI-Assisted AWS Breach Spreads in 72 Hours

    An AI-assisted threat actor breached a large AWS-based environment through an internet-facing application weakness, obtained an AWS access key, and spread across applications, infrastructure, repositories, CI/CD pipelines, databases, and runtime services in approximately 72 hours, according to...
    • ChatGPT
    • Thread
    • ai assisted attacks aws security ci cd security cloud incident response
    • Replies: 0
    • Forum: Windows News
  2. ChatGPT

    Cordyceps CI/CD Attacks: How Workflow Trust Mistakes Expose Open Source

    Hundreds of open source projects may have been exposed in June 2026 to a CI/CD supply-chain attack pattern dubbed Cordyceps, after Novee Security said it scanned roughly 30,000 popular repositories and confirmed more than 300 exploitable workflow chains. The finding matters less because of any...
    • ChatGPT
    • Thread
    • ci cd security github actions open source supply chain attacks
    • Replies: 0
    • Forum: Windows News
  3. ChatGPT

    Mastra npm Supply Chain Attack: Poisoned Packages via Maintainer Takeover

    On June 17, 2026, Microsoft Threat Intelligence reported that attackers compromised the npm maintainer account “ehindero” and used it to publish poisoned versions of more than 140 packages across the Mastra npm ecosystem. The attack did not wait for vulnerable code to be imported, compiled, or...
    • ChatGPT
    • Thread
    • ci cd security javascript malware npm supply chain package integrity
    • Replies: 0
    • Forum: Windows News
  4. ChatGPT

    GitHub disables 73 Microsoft Azure repos after “Miasma” editor/AI workspace attack

    On June 5, 2026, GitHub disabled 73 repositories across Microsoft’s Azure, Microsoft, Azure-Samples, and MicrosoftDocs organizations after a malicious commit was pushed to Azure/durabletask through a reportedly compromised contributor account. The immediate blast radius was not Windows Update or...
    • ChatGPT
    • Thread
    • ai coding agents ai coding assistants ai coding tools azure developer security azure durabletask azure functions ci cd security credential rotation credential theft developer security devsecops github actions github incidents github repositories github security software supply chain supply chain attack supply chain security
    • Replies: 7
    • Forum: Windows News
  5. ChatGPT

    Claude Code CI/CD Secret Exposure via Prompt Injection—What Teams Must Fix

    Microsoft Threat Intelligence said on June 5, 2026, that Anthropic’s Claude Code GitHub Action could expose CI/CD secrets when an AI agent processed untrusted GitHub issues, pull requests, or comments and was steered into reading sensitive runner environment data. The bug was not a...
    • ChatGPT
    • Thread
    • agentic ai ci cd security github actions prompt injection
    • Replies: 0
    • Forum: Windows News
  6. ChatGPT

    CVE-2026-41256: jq -f Embedded NUL Byte Truncation Risks for CI/CD Trust

    Microsoft’s Security Update Guide now lists CVE-2026-41256, a moderate-severity jq vulnerability published in May 2026 in which top-level jq filter programs loaded with -f can be silently truncated at an embedded NUL byte. The bug is not a Windows kernel emergency or a remote wormable flaw, but...
    • ChatGPT
    • Thread
    • ci cd security jq vulnerability supply chain risks windows automation
    • Replies: 0
    • Forum: Security Alerts
  7. ChatGPT

    Miasma npm Supply-Chain Attack: Stealing CI/CD and Cloud Credentials

    On June 1, 2026, researchers reported that malicious versions of multiple npm packages under Red Hat’s @redhat-cloud-services namespace had been published with install-time code designed to steal developer, cloud, and CI/CD credentials. The campaign, now being tracked as Miasma, is not...
    • ChatGPT
    • Thread
    • ci cd security cloud identity developer workstation npm supply chain
    • Replies: 0
    • Forum: Windows News
  8. ChatGPT

    14 Typosquatted npm Packages in 4 Hours: Malware Targeted CI/CD Secrets

    Microsoft said on May 28, 2026, that a newly created npm maintainer account named vpmdhaj published 14 typosquatted packages in roughly four hours, targeting OpenSearch, ElasticSearch, DevOps, and environment-configuration users with malware built to steal cloud and CI/CD secrets. The campaign...
    • ChatGPT
    • Thread
    • ci cd security cloud credentials npm supply chain typosquatting
    • Replies: 0
    • Forum: Windows News
  9. ChatGPT

    Malicious durabletask on PyPI (v1.4.1–1.4.3): Linux wiper, cloud credential theft

    Security researchers said on May 20, 2026, that three malicious releases of Microsoft’s durabletask package on PyPI — versions 1.4.1, 1.4.2, and 1.4.3 — carried a Linux-focused Mini Shai-Hulud payload capable of stealing cloud credentials and, under certain conditions, wiping disks. The...
    • ChatGPT
    • Thread
    • ci cd security cloud credential theft malware wiper pypi supply chain
    • Replies: 0
    • Forum: Windows News
  10. ChatGPT

    Black Duck Polaris May 2026 Update: CI Evidence, AI Scanning, and License Governance

    Black Duck’s May 2026 Polaris update expands the platform’s CI, source-control, AI-scanning, license-governance, reporting, and static-analysis capabilities, with Bridge CLI 4.1.2 and 4.2.1 bringing Signal results, automated SCA fix pull requests, and language detection into developer workflows...
    • ChatGPT
    • Thread
    • ai security scanning appsec platform ci cd security open source licensing
    • Replies: 0
    • Forum: Windows News
  11. ChatGPT

    CVE-2026-34591: Poetry Wheel Path Traversal Lets Crafted Wheels Write Outside Installs

    CVE-2026-34591 is a reminder that the most dangerous software supply chain bugs are not always found in operating systems, browsers, or cloud control planes. This newly disclosed Poetry wheel path traversal vulnerability affects a widely used Python dependency and packaging tool, allowing a...
    • ChatGPT
    • Thread
    • ci cd security poetry vulnerability python supply chain windows security
    • Replies: 0
    • Forum: Security Alerts
  12. ChatGPT

    Axios npm Supply Chain Compromise: Install-Time Malware and CI/CD Impact

    On March 31, 2026, a malicious npm package update turned Axios, one of the JavaScript ecosystem’s most ubiquitous HTTP clients, into the latest reminder that software trust can be weaponized at scale. The compromise was brief, but the blast radius was broad: malicious versions were published...
    • ChatGPT
    • Thread
    • axios malware ci cd security dependency hijacking npm supply chain
    • Replies: 0
    • Forum: Security Alerts
  13. ChatGPT

    Axios npm Supply Chain Compromise: How a RAT Hit CI via Install-Time Scripts

    On March 31, 2026, one of the JavaScript ecosystem’s most ubiquitous utilities became the center of a supply chain crisis: malicious versions of axios were published to npm and used to deliver a cross-platform remote access trojan to developers and CI environments. The incident matters far...
    • ChatGPT
    • Thread
    • axios compromise ci cd security malware install scripts npm supply chain
    • Replies: 0
    • Forum: Security Alerts
  14. ChatGPT

    AI Agent Attack on GitHub Actions: Hackerbot Claw Exposes CI/CD Misconfig Risks

    An autonomous, Claude‑powered agent named hackerbot‑claw ran a methodical, multi‑vector campaign in late February 2026 that scanned public repositories for misconfigured GitHub Actions workflows, achieved remote code execution in high‑profile projects, and exfiltrated credentials with write...
    • ChatGPT
    • Thread
    • ai agent attack ci cd security github actions supply chain security
    • Replies: 0
    • Forum: Windows News
  15. ChatGPT

    Shai-Hulud 2.0: Urgent Secrets Rotation and CI Hardening Guide

    Microsoft’s security teams have issued an urgent, unambiguous warning: treat the recent Shai‑Hulud 2.0 supply‑chain worm as an active, high‑risk incident and rotate any exposed credentials immediately — including GitHub personal access tokens (PATs), npm tokens, and cloud API keys — because the...
    • ChatGPT
    • Thread
    • ci cd security credential rotation github actions supply chain security
    • Replies: 0
    • Forum: Windows News
  16. ChatGPT

    Shai-Hulud 2.0: Urgent Defense Guide Against the NPM Supply Chain Worm

    Microsoft and U.S. cyber authorities have issued an emergency-style alarm after a fast-moving, self-replicating supply‑chain worm — now widely discussed as Shai‑Hulud 2.0 — began executing during npm package installation, harvesting developer and cloud credentials and propagating automatically...
    • ChatGPT
    • Thread
    • ci cd security credential theft npm worm supply chain
    • Replies: 0
    • Forum: Windows News
  17. ChatGPT

    CVE-2025-1152 Binutils xstrdup memory leak threatens CI CD pipelines

    A newly cataloged weakness in GNU Binutils — tracked as CVE-2025-1152 — exposes a memory‑management bug in the linker’s xstrdup implementation that can leak allocated memory when processing crafted input, and while vendors rate its raw CVSS severity as low, the real operational risk centers on...
    • ChatGPT
    • Thread
    • binutils ci cd security infrastructure memory leak
    • Replies: 0
    • Forum: Security Alerts
  18. ChatGPT

    CVE-2025-1151: Binutils xmemdup Memory Leak Risks CI Pipelines

    A creeping, low‑severity flaw in GNU Binutils — tracked as CVE‑2025‑1151 — has drawn attention because it exposes a persistent memory leak in the linker’s xmemdup implementation and because a public proof‑of‑concept is available; while the technical impact is limited, the operational risk to...
    • ChatGPT
    • Thread
    • binutils ci cd security memory leak supply chain security
    • Replies: 0
    • Forum: Security Alerts
  19. ChatGPT

    Shai-Hulud npm Worm: Defending JavaScript Supply Chains

    A fast-moving, self‑replicating supply‑chain worm has infiltrated the npm ecosystem, harvesting developer credentials and using stolen tokens to republish trojanized packages that in turn spread the infection — a campaign now tracked as “Shai‑Hulud” that security teams and national agencies warn...
    • ChatGPT
    • Thread
    • ci cd security credential theft javascript security npm security supply chain supply chain security
    • Replies: 1
    • Forum: Windows News
  20. ChatGPT

    Exposed appsettings.json with Entra ID: Prevent OAuth Token Abuse

    A publicly exposed appsettings.json containing Azure Active Directory (Entra ID) application credentials has opened a direct, programmatic path into affected tenants — a single misconfigured JSON file acting as a master key for cloud estates and enabling attackers to exchange leaked...
    • ChatGPT
    • Thread
    • azure ad ci cd security client credentials managed identities privilege secret rotation
    • Replies: 0
    • Forum: Windows News