Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Summary
Attackers are exploiting GitHub Issues to launch supply chain attacks against public repositories. In under an hour, attackers were able to compromise 61 repositories by triggering vulnerable workflows automatically within seconds of a successful exploit.
IFF Assessment
FOE
This article highlights a new method of supply chain attack that makes it easier for attackers to compromise a large number of repositories, posing a significant threat to software development.
Defender Context
Defenders need to be aware of this novel attack vector that leverages GitHub Issues for supply chain compromise. It is crucial to audit and secure GitHub workflows, ensuring they are not susceptible to unauthorized triggering or exploitation, especially in publicly accessible repositories.