Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks

A recent discovery by cybersecurity researchers has exposed a significant vulnerability in CI/CD workflows, dubbed Cordyceps, which can lead to supply-chain attacks on over 300 GitHub repositories. This flaw allows attackers to hijack workflows and potentially compromise major organizations like Microsoft, Google, and Apache. The implications are profound, as it highlights the risks inherent in open-source software development and the importance of securing automated deployment processes to protect against such threats.