#devops
-
GitHub Actions wobbled for nearly four hours
On the evening of 5 October, GitHub spent almost four hours fighting an Actions outage: workflows started late, and Pages along with billing pages went down too.
-
Attacks on JFrog Artifactory: A Flaw Chain Opens the Path to Admin Rights
Wiz has recorded attacks on unpatched self-hosted JFrog Artifactory servers: attackers chained two vulnerabilities to gain administrator rights and plant backdoors.
-
The Shai-Hulud Worm Now Hunts for Credentials in 469 Places — and That's a Symptom of a Tactical Shift
GitGuardian researchers have found that a new variant of the Shai-Hulud infostealer worm checks 469 secret-storage locations instead of the previous 189. Attackers have stopped breaking trust in the supply chain and are simply harvesting the keys that trust rests on.
-
Critical GraphQL Flaw in GitLab Lets Attackers Delete Public Projects Without Authorization
GitLab has shipped an out-of-band security update closing the critical flaw CVE-2026-19478, rated CVSS 9.4, which under certain conditions gives an unauthenticated attacker the ability to modify and delete public projects and user data.
-
Copilot's AI "autofix" opened a hole in Snowflake's Jira
GitHub Copilot's automated AI assistant swapped safe code for vulnerable code and opened a path to Snowflake credentials. Five days later, an autonomous Wiz agent found the flaw.
-
Major GitHub Outage: Errors Hit API, Actions, Issues and Copilot
On August 17, GitHub was hit by a major outage: error rates reached 20% across the web interface and API, and roughly 50% when downloading repository archives and content.
-
Terabytes of Credentials Leaked: A Supply-Chain Attack via LiteLLM
The compromise of LiteLLM, a popular AI-development tool, led to the theft of secrets from more than 2,500 organizations, among them Microsoft, Amazon, Cisco, Samsung and Salesforce.
-
CISA: Critical JetBrains TeamCity Vulnerability Already Under Active Exploitation
The newly disclosed vulnerability CVE-2026-63077 (CVSS 9.8) in on-premise versions of TeamCity lets an unauthenticated attacker execute arbitrary commands. CISA reports active attacks and is requiring federal agencies to apply the patch by August 8.
-
Critical Gitea Vulnerability: Reading Server Files via Org Markup Without Logging In
In Gitea versions 1.22.1 through 1.27.0, an unauthenticated attacker could read any file accessible to the service account. All it took was a public repository and specially crafted Org markup.
-
Critical TeamCity Vulnerability: Command Execution Without Authorization
JetBrains is urging users of on-premises TeamCity to update immediately: a critical flaw rated 9.8 lets an unauthenticated attacker execute operating system commands.