Cybersecurity articles tagged #DevSecOps on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cordyceps-defending-against-malicious-pull-requests-in-ci-cdhttps://runtimerebel.com/blog/cordyceps-defending-against-malicious-pull-requests-in-ci-cdThe Cordyceps campaign highlights critical CI/CD vulnerabilities in GitHub Actions, targeting high-profile projects like Apache Doris and Cloudflare Workers SDK.Wed, 24 Jun 2026 09:23:01 GMTGitHub ActionsCI CD SecuritySupply Chain AttackDevSecOpsCordycepshttps://runtimerebel.com/blog/novo-nordisk-breach-securing-secrets-in-github-development-pipelineshttps://runtimerebel.com/blog/novo-nordisk-breach-securing-secrets-in-github-development-pipelinesAnalysis of the Novo Nordisk GitHub token leak and why secrets management must transition from static tools to identity-based security frameworks.Fri, 19 Jun 2026 09:48:31 GMTGitHubSecrets ManagementNovo NordiskDevSecOpsCI CD Securityhttps://runtimerebel.com/blog/github-supply-chain-disruption-microsoft-repos-abused-to-host-malwarehttps://runtimerebel.com/blog/github-supply-chain-disruption-microsoft-repos-abused-to-host-malwareGitHub recently disabled 73 official Microsoft repositories after they were targeted in a massive campaign pushing password-stealing malware to developers.Tue, 09 Jun 2026 17:00:46 GMTGitHubMicrosoftSupply Chain AttackInfostealerDevSecOpshttps://runtimerebel.com/blog/boost-security-expands-sdlc-defense-via-strategic-acquisitionshttps://runtimerebel.com/blog/boost-security-expands-sdlc-defense-via-strategic-acquisitionsBoost Security secures $4 million and acquires SecureIQx and Korbit.ai to streamline automated governance and security within the development lifecycle.Thu, 07 May 2026 16:42:57 GMTBoost SecuritySDLCDevSecOpsSupply Chain SecurityAutomated Governancehttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignhttps://runtimerebel.com/blog/sap-npm-supply-chain-attack-analyzing-the-mini-shai-hulud-campaignSecurity researchers identified a malicious supply chain attack targeting SAP via NPM packages using the Bun runtime to evade traditional EDR detection.Thu, 30 Apr 2026 16:38:51 GMTSAPNPM SecurityMini Shai HuludDependency ConfusionBun RuntimeDevSecOpshttps://runtimerebel.com/blog/checkmarx-github-repository-data-leaked-following-supply-chain-attackhttps://runtimerebel.com/blog/checkmarx-github-repository-data-leaked-following-supply-chain-attackCheckmarx confirms internal GitHub repository data was published on the dark web following a March 2026 supply chain incident. Learn the impact and TTPs.Mon, 27 Apr 2026 16:37:34 GMTCheckmarxGitHubSupply Chain AttackData LeakDevSecOpshttps://runtimerebel.com/blog/anthropic-claude-code-source-code-leaked-via-npm-registryhttps://runtimerebel.com/blog/anthropic-claude-code-source-code-leaked-via-npm-registryAnthropic accidentally exposed proprietary source code for its Claude Code CLI tool on the public npm registry. Analyze the technical impact and risks.Wed, 01 Apr 2026 00:43:28 GMTAnthropicClaude CodeNPMSource Code LeakDevSecOpshttps://runtimerebel.com/blog/gitguardian-2026-report-analyzing-the-34-surge-in-secrets-sprawlhttps://runtimerebel.com/blog/gitguardian-2026-report-analyzing-the-34-surge-in-secrets-sprawlGitGuardian's 2026 report reveals 29 million leaked secrets on GitHub in 2025. Learn how AI and hardcoded credentials impact enterprise security posture.Mon, 30 Mar 2026 12:26:38 GMTGitGuardianSecrets SprawlGitHubDevSecOpsHard Coded Credentialshttps://runtimerebel.com/blog/betterleaks-a-new-open-source-tool-for-detecting-secrets-in-githttps://runtimerebel.com/blog/betterleaks-a-new-open-source-tool-for-detecting-secrets-in-gitBetterleaks is a new open-source secrets scanner designed to identify hardcoded credentials and sensitive data across directories and Git repositories.Sun, 15 Mar 2026 16:11:15 GMTBetterleaksGitleaksSecrets ScanningDevSecOpsCredential Leakagehttps://runtimerebel.com/blog/secure-by-design-mitigating-enterprise-risk-human-errorhttps://runtimerebel.com/blog/secure-by-design-mitigating-enterprise-risk-human-errorLeverage secure-by-design principles from software development to address non-technical enterprise risks, including governance gaps and human error, enhancing…Thu, 05 Mar 2026 20:17:03 GMTSecure By DesignEnterprise Risk ManagementHuman ErrorCybersecurity GovernanceDevSecOpsRisk Mitigationhttps://runtimerebel.com/blog/ai-driven-development-and-the-crisis-of-firewall-rule-backlogshttps://runtimerebel.com/blog/ai-driven-development-and-the-crisis-of-firewall-rule-backlogsExamine how AI-accelerated coding creates network security bottlenecks and why manual firewall management fails in modern DevSecOps environments.Tue, 03 Mar 2026 04:38:38 GMTAi Driven DevelopmentFirewall ManagementNetwork SecurityDevSecOpsAutomationhttps://runtimerebel.com/blog/claude-code-security-analysis-assessing-ai-cli-assistant-riskshttps://runtimerebel.com/blog/claude-code-security-analysis-assessing-ai-cli-assistant-risksTechnical analysis of Anthropic's Claude Code CLI tool, evaluating its impact on application security and potential for introducing code vulnerabilities.Fri, 27 Feb 2026 16:17:21 GMTAnthropicClaude CodeAI SecurityDevSecOpsSecure Codinghttps://runtimerebel.com/blog/anthropic-claude-code-security-automated-static-analysis-and-remediation-previewhttps://runtimerebel.com/blog/anthropic-claude-code-security-automated-static-analysis-and-remediation-previewAnthropic has introduced Claude Code Security, a research-preview tool designed to perform static analysis for vulnerability detection and automated patch generation…Mon, 23 Feb 2026 04:06:17 GMTAISDLCSASTVulnerability ManagementDevSecOps