Vulnerabilities
Block Fork-Triggered CI Builds to Stop SaltStack Docs Secret Theft
A critical flaw in the SaltStack docs repository allows malicious fork pull requests to execute code and steal secrets, requiring an immediate commit update.
CI/CD
Everything Malware Chronicle has reported about CI/CD: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
Vulnerabilities
GitLab Self-Managed Admins Must Upgrade Immediately to Fix Critical CI/CD Regex RCE Vulnerability
GitLab issues urgent fixes for a maximum-severity flaw in its CI/CD regex compiler that allows attackers to run code without logging in.
Cloud Security
DevSecOps vs CI/CD: Why Security Needs Its Own Pipeline
CI/CD accelerates delivery but often bypasses security checks, while DevSecOps embeds verification directly into the build process to catch flaws early.