Main Stage·42 min
Aviad Hahami
Reconstructs the multi-stage CI/CD supply chain compromise of the popular tj-actions GitHub Action, detailing secret exfiltration and attacker tradecraft.
supply-chaingithub-actionsci-cd+2
Aviad Hahami
2 talks in the archive.
Filters+
Loading filters…
1–2 of 2 talks · loading…
Main Stage·38 min
Aviad Hahami
Attack vectors exploiting OpenID Connect under-configurations and IdP misconfigurations in CI/CD pipelines to breach cloud environments.
oidccloudidentity+2