Tag: GitHub Action
-
Alerts: CISA Adds One Known Exploited Vulnerability to Catalog
Source URL: https://www.cisa.gov/news-events/alerts/2025/03/24/cisa-adds-one-known-exploited-vulnerability-catalog Source: Alerts Title: CISA Adds One Known Exploited Vulnerability to Catalog Feedly Summary: CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-30154 reviewdog action-setup GitHub Action Embedded Malicious Code Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and…
-
Hacker News: Show HN: Formal Verification for Machine Learning Models Using Lean 4
Source URL: https://github.com/fraware/leanverifier Source: Hacker News Title: Show HN: Formal Verification for Machine Learning Models Using Lean 4 Feedly Summary: Comments AI Summary and Description: Yes Summary: The project focuses on the formal verification of machine learning models using the Lean 4 framework, targeting aspects like robustness, fairness, and interpretability. This framework is particularly relevant…
-
Schneier on Security: Critical GitHub Attack
Source URL: https://www.schneier.com/blog/archives/2025/03/critical-github-attack.html Source: Schneier on Security Title: Critical GitHub Attack Feedly Summary: This is serious: A sophisticated cascading supply chain attack has compromised multiple GitHub Actions, exposing critical CI/CD secrets across tens of thousands of repositories. The attack, which originally targeted the widely used “tj-actions/changed-files” utility, is now believed to have originated from an…