Attackers are increasingly targeting SDLC infrastructure rather than finished applications, treating CI/CD pipelines, build runners, and IDEs as high-value entry points. Three real-world incidents illustrate the escalating threat: the Ultralytics AI library hijack via a GitHub Actions 'Pwn Request', the Shai-Hulud 2.0 campaign

5m read timeFrom sdtimes.com
Post cover image

Sort: