Software Development Pipelines Offer Cybercriminals ‘Free-Range’ Access to Cloud, On-Prem

A Q&A with NCC Group’s Viktor Gazdag ahead of a Black Hat USA session on CI/CD pipeline risks reveals a scary, and expanding, campaign vector for software supply chain attacks and RCE.

You can read the full article here.