#cicd
-
GitLab Patches Max-Severity Code Execution Flaw in CI/CD Regex Compiler
An integer overflow bug let an unauthenticated attacker run arbitrary code on a GitLab server through a specially crafted regular expression. The company urges immediate upgrades.
-
GitHub Actions wobbled for nearly four hours
On the evening of 5 October, GitHub spent almost four hours fighting an Actions outage: workflows started late, and Pages along with billing pages went down too.
-
Compromised GitHub Actions brought back online with malware still attached
Two third-party GitHub Actions infected in May's Mini Shai-Hulud campaign were re-enabled and kept serving the old malicious payload for more than a week.
-
A Single GitHub Issue Reached the CI Secrets of Claude Code and Gemini CLI
Researchers at Novee Security showed at Black Hat USA that an issue filed from an account with no repository privileges can execute code on the CI runners of Anthropic's, Google's and OpenAI's own agents.