AI
the tool built to catch security bugs got hacked — and quietly leaked into 2,500 companies' pipelines
A poisoned vulnerability scanner sat inside a widely-trusted build pipeline for five days before anyone noticed, and Cisco, S&P Global and the European Commission are on the list of who it touched.
Lena Fischer · 1h ago · 7 min