Covered by 3 sources including SecurityWeek, tldr.tech

Novee's research team discovered Cordyceps, a critical supply chain flaw hiding in plain sight, impacting code repositories at thousands of organizations, including Microsoft, Google, Apache, and Cloudflare.

Sign in to keep reading the full article.

Sign Up Log In

Covered in 3 articles

SecurityWeek·

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

tldr.tech·

FortiBleed cred harvest 📶, ModeloRAT backdoor 🚪, Mythos finds gov flaws 🏛️

The Hacker News·

Cordyceps: The Silent Parasite Consuming Your Supply Chain (opens in new tab)

Covered in 3 articles

Exploitable CI/CD Vulnerabilities Expose Millions of Repositories to Hijacking

FortiBleed cred harvest 📶, ModeloRAT backdoor 🚪, Mythos finds gov flaws 🏛️

Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks