AI Summary

A critical vulnerability has been identified in the CI/CD workflow of numerous GitHub repositories. This weakness, known as Cordyceps, can be exploited by attackers to hijack workflows and compromise open-source supply chains. The issue has been flagged by cybersecurity researchers at Novee Security, who have identified a "critical exploitable pattern" that can be used to gain full control of repositories at several major organizations. These organizations include tech giants such as Microsoft and Google, as well as open-source projects like Apache. The exposure of over 300 GitHub repositories to supply-chain attacks highlights the potential risks associated with this vulnerability.

AI summaries can be wrong sometimes—always verify important details using the source article.