This page may contain stale information. Last updated: 2026-06-28
Overview
Novee Security is a cybersecurity research firm that disclosed Cordyceps, a systemic class of exploitable github-actions CI/CD vulnerabilities in June 2026.
Recent Developments
- 2026-06-23: Published Cordyceps disclosure — 30K repo scan, 300+ confirmed exploitable chains at Microsoft, Google, Apache, Cloudflare, Python PSF (2026-06-25-novee-cordyceps-github-actions-supply-chain)
Related
- cordyceps
- supply-chain-security
- github-actions
- trail-of-bits
- novee-cordyceps-github-actions-supply-chain