Azure DevOps Affected by TeamPCP
Azure DevOps was one of the platforms affected by the TeamPCP campaign, with 233 organizations impacted.
Tag: CI/CD
Bitbucket Pipelines Affected by TeamPCP
Bitbucket Pipelines was one of the platforms affected by the TeamPCP campaign, with 94 organizations impacted.
TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
The Australian Federal Police (AFP) has charged two Western Australian men with a combined total of 14 offences for their alleged roles…
CVE-2026-12537: Critical OS Command Injection in Gemini CLI
CVE-2026-12537 is a critical OS command injection vulnerability in Google's Gemini CLI container launcher. It allows an unprivileged attacker to execute arbitrary…
TeamCity: JetBrains CI/CD Server
TeamCity is a CI/CD server by JetBrains. On-premise versions are affected by CVE-2026-63077, a critical RCE vulnerability actively exploited in the wild.
SleeperGem Attack: Three Malicious RubyGems Packages Target Developer Machines
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…
CircleCI Affected by TeamPCP
CircleCI was one of the platforms affected by the TeamPCP campaign, with 15 organizations impacted.
Travis CI: CI/CD Platform
Travis CI is a CI/CD platform. The SleeperGem malware checks for Travis environment variables to avoid running on CI runners.
Jenkins Affected by TeamPCP
Jenkins was one of the platforms affected by the TeamPCP campaign, with 105 organizations impacted.
GitLab Most Affected Platform in TeamPCP Campaign
GitLab was the most affected platform according to StepSecurity analysis, with 1,064 organizations impacted.