MITRE and Splunk Expose Critical Vulnerabilities in Open Source GitHub Actions

Jaw-dropping security flaws found in open source code could allow hackers to spirit away entire projects - here's what devs need to know - WorldNL Magazine

Sysdig exposed how a trusted GitHub feature can silently hand control to attackerspull_request_target isn’t just risky, it’s a loaded weapon in the wrong handsEven top-tier security projects like MITRE’s can fall to simple GitHub workflow misconfigurationsExperts have revealed several critical vulnerabilities in GitHub Actions workflows which could pose serious risks to some major open source projects.A recent investigation by Sysdig’s Threat Re…

MITRE and Splunk Expose Critical Vulnerabilities in Open Source GitHub Actions

The Sysdig TRT has uncovered critical vulnerabilities in the GitHub Actions workflows of several high-profile open source projects, including those maintained by MITRE and Splunk. GitHub Actions, a popular platform for automating CI/CD pipelines, offers immense flexibility for developers but also harbors significant security risks when improperly configured. High-Profile Projects Compromised The Sysdig TRT’s proactive […] The post MITRE and Splu…

GitHub Actions attack renders even security-aware orgs vulnerable

Developers hosting code repositories on GitHub continue to use GitHub Actions insecurely, setting up automatic workflows that can be exploited to extract sensitive authentication tokens, researchers warn. Security risks associated with GitHub Actions workflows are not new. Still, researchers from Sysdig have identified dozens of vulnerable projects, including ones from high-profile security-aware organizations MITRE and Splunk. “These workflows …

Dangerous by default: Insecure GitHub Actions found in MITRE, Splunk, and other open source repositories

Open the article to view the coverage from Sysdig