Researchers at Praetorian have discovered critical misconfigurations in TensorFlow’s CI/CD systems that enable attackers to compromise build agents, potentially leading to the compromise of TensorFlow releases on GitHub and PyPi.
View full story…
Critical Misconfigurations in TensorFlow’s CI/CD Systems Allow Attackers to Compromise Build Agents and Potentially Poison Supply Chain
