Python Software Foundation’s Black Tool Compromised by Cordyceps
The Python Software Foundation's Black tool was affected by the Cordyceps flaw, allowing a single pull request to execute attacker code and…
Tag: Black
Python Black Tool CI/CD Vulnerability
The Python Software Foundation's Black tool had a CI/CD flaw allowing pull requests to execute attacker code and steal automation tokens.
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…