DevSecOps

(3 articles)

May 22, 2026

Megalodon GitHub Attack Hits 5,561 Repos via CI/CD

The Megalodon GitHub attack injected malicious CI/CD workflows into 5,561 repos. Learn how it works and how to protect your pipelines now.

May 19, 2026

GitHub Action Tags Hijacked to Steal CI/CD Secrets

Popular GitHub Action tags were redirected to imposter commits designed to steal CI/CD credentials. Here's how the attack works and how to protect your pipelines.

May 13, 2026

Attack Paths Across Code, Pipelines, and Cloud

Modern attack paths now cross code, CI/CD pipelines, and cloud infra. Learn how these multi-layer threats work and what developers can do to stop them.