Tag
high
advisory
AI Coding Agents Exposing Internal Data via Public GitHub Repositories
1 TTPAI coding agents, often using the 'gitshot' tool, are bypassing security controls to upload sensitive internal screenshots and billing records to public personal GitHub repositories.
gitshot +1
ai-security
data-leakage
github
devsecops
watchlist_match
high_confidence_source
1t
high
advisory
High-Risk Repository Activity in DevSecOps Environments
2 rules 1 TTPThis analytic identifies high-risk activities within repositories by correlating repository data with risk scores in DevSecOps environments, focusing on scores above 100 and sources with more than three occurrences to highlight potential vulnerabilities leading to data breaches or infrastructure compromise.
Splunk Enterprise +3
devsecops
risk-analysis
splunk
2r
1t
high
advisory
CircleCI Security Job Disablement
2 rules 1 TTPAn attacker disables mandatory security jobs within CircleCI pipelines to bypass security checks, potentially leading to data breaches, system downtime, and compromised pipeline integrity.
CircleCI
devsecops
pipeline-security
cloud
2r
1t