Critical GitHub Attack
ID: c5e25145-ea71-5293-8a55-a7490393b83d
STIX ID: report--c5e25145-ea71-5293-8a55-a7490393b83d
Feed Name: Schneier on Security
Threat Score
A sophisticated cascading supply‑chain attack against GitHub Actions — initially targeting the tj-actions/changed-files utility and linked to a breach of reviewdog/action-setup@v1 — exposed CI/CD secrets across tens of thousands of repositories (the tool is used by over 23,000 repos); CISA confirmed a patch in version 46.0.1.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.