Category: CI/CD Security

jumping shell - bin/bash - escape restricted shell

Jumping Shell: How Attackers Escape Restricted Shells to /bin/bash

Learn how jumping shell exploits let attackers escape restricted shell to /bin/bash, the risks they pose, and how to secure CI/CD pipelines!
package-lock.json - package lock json - npm typosquatting

Package-Lock.json Typo: How It Can Hijack Your Build

A typo in package-lock.json can expose you to NPM typosquatting. Learn how those errors hijack builds and how to secure dependencies!
python try catch - try catch python - try catch block

Python Try Catch Blocks: When Error Handling Becomes a Risk

How Python try catch blocks work, when try catch Python patterns turn risky & best practices to secure your code with safe error handling!
JavaScript Obfuscator - JavaScript deobfuscator - JavaScript malware

Why JavaScript Obfuscator Tools Are Abused by Attackers (And How to Detect Them)

Learn how JavaScript Obfuscator tools are misused to hide JavaScript malware, and how to detect threats before they reach production!
spoofing attack - spoofing definition - what type of attack relies on spoofing

Spoofing Definition for Developers: What You Need to Know About These Attacks

Learn the spoofing definition, how an attack works, and what type of attack relies on spoofing to protect your code and pipelines in our post
markdown cheat sheet - Markdown guide - Markdown tips and tricks

Markdown Cheat Sheet: Tips to Prevent Injection and Formatting Errors

Explore our Markdown Cheat Sheet, and Markdown tips and tricks to prevent formatting errors, automation bugs, and security risks!
Checksum errors

Checksum Errors Explained: How to Detect and Prevent Integrity Failures

Learn what checksum errors are, why they matter, and how to prevent checksum integrity failures in CI/CD pipelines & software supply chains!
error pg_config executable not found

Getting error: pg_config executable not found? Fix Your Python Build the Secure Way

Fix the "pg_config executable not found" error securely in CI/CD, Docker, or dev. Learn safe installs & prevent supply chain risks here!
TOP 10 INDICATORS OF COMPROMISE

Top 10 Indicators of Compromise in CI/CD Pipelines

Discover what are indicators of compromise in IOC cybersecurity and how to protect CI/CD pipelines from hidden threats.
9 min read
what is deserialization - remote code execution

How Insecure Deserialization Becomes Remote Code Execution (and How to Catch It Before Merge)

Learn what is deserialization & how unsafe use can escalate to remote code execution. Spot risks, artifacts and CI/CD before they ship!
sql substring_index - substring_index in sql - string functions in sql

The Hidden Security Pitfalls of SQL SUBSTRING_INDEX

Misused string functions in SQL can leak data or break tenant isolation in critical systems. Learn the hidden risks of sql substring_index!
OpenSSL s_client - ssl error - TLS security

OpenSSL s_client Showed My TLS Was Broken: Diagnosing SSL Errors in CI

Fix SSL errors fast with OpenSSL s_client. Learn how to diagnose TLS security issues in CI/CD, before they break builds!