Infosec News Nuggets — June 25, 2026

‘Cordyceps’: Malicious Pull Requests Threaten CI/CD Workflows Security researchers at Novee have disclosed a widespread CI/CD vulnerability class dubbed “Cordyceps,” named for the parasitic fungus known for hijacking its hosts. The weakness exploits overly permissive automated workflows triggered by…

View Post on Scour ↗

More from AboutDFIR on Scour.

Covers FortiBleed Campaign Exposing Credentials for 73,932 FortiGate Systems