Cybersecurity articles tagged #CI CD on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2026-97229-gitlab-rce-via-integer-overflow-patch-nowhttps://runtimerebel.com/blog/cve-2026-97229-gitlab-rce-via-integer-overflow-patch-nowCritical vulnerability CVE-2026-97229 in GitLab Community/Enterprise Edition allows unauthenticated RCE through CI/CD regex, actively exploited.Sun, 01 Nov 2026 03:36:28 GMTRemote Code ExecutionCI CDCVE-2026-97229GitLabInteger Overflowhttps://runtimerebel.com/blog/hardening-ci-cd-pipelines-countering-advanced-supply-chain-threatshttps://runtimerebel.com/blog/hardening-ci-cd-pipelines-countering-advanced-supply-chain-threatsThreat actors actively target CI/CD pipelines, developer workstations, and security tools for credential theft and supply chain compromise.Thu, 01 Oct 2026 15:02:44 GMTCI CDSoftware Supply ChainGitHub ActionsSupply Chain AttackDeveloper Workstationshttps://runtimerebel.com/blog/sdlc-supply-chain-attacks-target-developer-tools-ci-cdhttps://runtimerebel.com/blog/sdlc-supply-chain-attacks-target-developer-tools-ci-cdAttackers target the software development lifecycle, exploiting developer tools, CI/CD pipelines, and open-source dependencies to inject malware and backdoors.Sat, 22 Aug 2026 00:44:34 GMTSupply Chain AttackCI CDDeveloper ToolsMalwareSDLChttps://runtimerebel.com/blog/cordyceps-ci-cd-flaws-supply-chain-attacks-on-github-repositorieshttps://runtimerebel.com/blog/cordyceps-ci-cd-flaws-supply-chain-attacks-on-github-repositoriesNovee Security uncovered Cordyceps, a critical CI/CD workflow flaw exposing over 300 GitHub repositories to supply chain compromise, affecting major organizations.Wed, 24 Jun 2026 16:50:14 GMTCordycepsCI CDGitHubSupply Chain AttackNovee SecurityRepository Compromisehttps://runtimerebel.com/blog/jinx-0164-targets-crypto-firms-with-macos-malware-and-fake-lureshttps://runtimerebel.com/blog/jinx-0164-targets-crypto-firms-with-macos-malware-and-fake-luresThe JINX-0164 threat actor targets cryptocurrency firms via recruitment-themed social engineering, macOS-specific malware, and CI/CD infrastructure exploits.Thu, 28 May 2026 09:22:52 GMTJINX 0164macOSCryptocurrencyCI CDSocial Engineeringhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-bypasses-github-actions-ci-cdhttps://runtimerebel.com/blog/axios-npm-supply-chain-attack-bypasses-github-actions-ci-cdA sophisticated supply chain attack targeted the Axios NPM package, leveraging a compromised token to bypass GitHub Actions CI/CD and deploy malicious versions.Wed, 01 Apr 2026 12:28:22 GMTAxiosNPMSupply Chain AttackNorth KoreaGitHub ActionsCI CDhttps://runtimerebel.com/blog/trivy-supply-chain-attack-targets-ci-cd-secrets-in-devops-workflowshttps://runtimerebel.com/blog/trivy-supply-chain-attack-targets-ci-cd-secrets-in-devops-workflowsA supply chain attack leveraged the Trivy security tool to deploy an infostealer within CI/CD pipelines, compromising cloud credentials and sensitive secrets.Tue, 24 Mar 2026 00:33:07 GMTTrivySupply Chain AttackCI CDInfostealerCloud SecurityDevOpsSecrets Managementhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionhttps://runtimerebel.com/blog/proactive-defense-hardening-against-destructive-cyberattacks-2026-editionComprehensive guide on hardening against destructive cyberattacks, including wipers, ransomware, and data destruction tactics across on-premises and cloud environments.Fri, 06 Mar 2026 16:26:03 GMTDestructive AttacksWiper MalwareRansomwareHardeningCyber ResilienceMFABackupActive DirectoryKubernetesCI CDCloud SecurityNetwork Segmentation