ThreatVectr
Tag

#CI/CD

4 stories taggedCI/CD.

Illustration: a developer workstation at dusk, a mechanical keyboard and an open laptop showing an abstract green-on-dark
Identity & Access

GitLab's Per-User Issue Email Is a Password in Disguise

The private address you use to file issues by email can also push code and start pipelines as you. Treat it like a credential, because it is one.

4 min read
A developer's machine with folder structure expanding across the screen, credential stealer malware scanning through 469 different storage locations simultaneou
Identity & Access

Shai-Hulud Worm Now Hunts 469 Places for Developer Secrets

A self-spreading credential thief has more than doubled the hiding spots it checks on developer machines, from 189 to 469.

4 min read
Illustration: A dark server room interior shot from floor level looking up at towering rack equipment
Cloud Security

Detection Engineering Grew Up. Most Security Stacks Didn't.

Behavior-based, CI/CD-integrated detection logic is eating vendor-supplied rules. What's actually driving the shift, and what teams still get wrong.

3 min read
Illustration: A dark server room bathed in dim green terminal light
AI Security

Bash Shell Tricks From the '90s Are Breaking AI Coding Agents Wide Open

Old-school shell injection techniques can bypass safeguards in most open-source AI coding agents, and a poisoned repo is all it takes to start the chain.

3 min read
© 2026 Threat Vectr