GitHub Actions

Poisoning the Vault: Bitwarden CLI Compromised in Global Supply Chain Campaign Bitwarden CLI supply chain attack

Poisoning the Vault: Bitwarden CLI Compromised in Global Supply Chain Campaign

Do Son April 24, 2026

Recently, reports surfaced regarding a sophisticated subversion of Infrastructure as Code (IaC) security scanning utilities, specifically Checkmarx...

GitHub Actions Attack: Stolen Token Led to Widespread Secret Leak The malicious code snippet

GitHub Actions Attack: Stolen Token Led to Widespread Secret Leak

Do Son April 10, 2025

While experts were investigating the compromise of the widely used GitHub Action tj-actions/changed-files, it became apparent that...