Cache Attacks on CI/CD Systems
Panagiotis Vasilikos
A new type of attack affecting major CI/CD service providers. Attackers can exploit CI/CD cache mechanisms to inject malicious code or steal your secrets.
This information is detailed in the paper by Gu, Ying, Chai, Pu, Duan and Gao "More Haste, Less Speed: Cache Related Security Threats in Continuous Integration Services".
Link:[https://www.computer.org/csdl/proceedingsarticle/sp/2024/313000a138/1Ub23VSl4re]
Subscribe to my newsletter
Read articles from Panagiotis Vasilikos directly inside your inbox. Subscribe to the newsletter, and don't miss out.
Written by
Panagiotis Vasilikos
Panagiotis Vasilikos
Everything I do professionally is around helping engineers create amazing applications that are both secure and reliable. That’s why I build engineering tools and educational content that simplify application security. Throughout my career, I have performed security audits for private and open-source projects, and have found critical vulnerabilities in Google and Mozilla products. I have also taught security to hundreds of engineers and students, while I have also been an external lecturer and Ph.D. candidate in computer science at the Technical University of Denmark. Here are some of the things I’m working on right now: Developing a tool 🛠️ that helps software engineers build applications which comply with privacy requirements Creating weekly educational content on application security using comic art 🦇 Creating a blog 📝 on security at securingbits.com If you’re interested in learning more about application security, I’d love to hear from you. Feel free to send me a message, and make sure to follow me so I can make security easy for you 🙂