nord-stream

Nord Stream Nord Stream — это инструмент, который позволяет извлекать секреты, хранящиеся в CI/CD-окружениях, путём развёртывания вредоносных пайплайнов. В настоящее время поддерживаются Azure DevOps, GitHub и GitLab. Подробнее в следующем посте в блоге:...

ObfuscatedSharpCollection

Obfuscated SharpCollection Быстрая и грязная попытка автоматизированной обфускации с помощью yetAnotherObfuscator от @0xcc00 вместе со свежими сборками распространённых наступательных C-инструментов, в стиле CDI с использованием конвейеров выпуска Azure DevOps. Obfuscated SharpCollection не...

ADOKit

ADOKit Описание Azure DevOps Services Attack Toolkit — ADOKit — это набор инструментов для атаки на Azure DevOps Services с использованием доступного REST API. Инструмент позволяет пользователю указать модуль атаки, а также действительные учетные данные ключ API или украденный cookie аутентификац...

POC-CVE-2026-42826-2026-42826-Microsoft-Azure-DevOps-Information-Disclosure-Vulnerability

CVE-2026-42826 — PoC раскрытия информации в Azure DevOps Обзор Поле| Значение ---|--- CVE| CVE-2026-42826 CVSS| 10.0 Критический Microsoft / 7.5 Высокий NVD CWE| CWE-200 Раскрытие конфиденциальной информации неавторизованному субъекту GHSA| GHSA-gmwx-3xm2-9fx8 Затронутые продукты| Azure DevOps...

SharpCollection

SharpCollection Ночные сборки распространённых оффенсивных C-инструментов, собранные прямо из их master-веток и выпускаемые в стиле CDI с помощью конвейеров выпуска Azure DevOps. Не нашли любимый инструмент? Не стесняйтесь открыть issue или написать мне в X @Flangvik Обратите внимание:...

sysmon-parser

sysmon-parser Автоматически генерируемый парсер Sysmon для Azure Sentinel Файл Sysmon-AllVersionsParser.txt можно загрузить как функцию в Azure Sentinel для анализа всех ваших событий. Существует конвейер Azure DevOps, который запускается ежедневно для установки последней версии Sysmon, извлекает...

azuredevops-enum

ado-enum Un outil en ligne de commande pour énumérer les organisations Azure DevOps à l’aide d’un Personal Access Token PAT. Il interroge l’API REST d’Azure DevOps pour exposer les projets, dépôts, connexions de service, builds, artefacts de build et paramètres de sécurité — utile lors...

CVE-2020-37267

A flaw was found in Renovate. When used with Azure DevOps, the bot's authorization token may be exposed in server or pipeline logs. This occurs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. An attacker with access to these logs could obtain the bot's...

CVE-2020-37267

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

EUVD-2020-31261

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267

Renovate versions >=19.180.0 and

CVE-2020-37267 Renovate 19.180.0 before 23.25.1 Token Leakage via Logs

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2020-37267: Insertion of Sensitive Information into Log File

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

PT-2026-78371

Renovate versions =19.180.0 and 23.25.1, when used with Azure DevOps, may expose the bot's authorization token in server or pipeline logs because the git http.extraheader=AUTHORIZATION parameter is logged without redaction. Anyone with access to saved logs could obtain the bot credentials. Fixed ...

CVE-2026-66378

An authenticated user without repository read permission may access private NuGet metadata under specific conditions...

Malicious code in matlab-azure-devops-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ecc42778bb54bfdea5784d5dcb68cf43c89def3dbaeddba1d1a6bd2850cb174b The package's preinstall script node index.js auto-executes on npm install and collects host identifiers os.hostname, os.userInfo.username, home...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2026-42826 — Azure DevOps Information Disclosure PoC O...

Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

A single invisible comment in an Azure DevOps pull request can turn a reviewer's own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft's official Azure DevOps MCP server, and it works because one ...

Beyond the benchmark: Advancing security at AI speed

In this article 1. From the lab into the pipeline 2. This month’s set of discoveries 3. Beyond the headline: What the engineering work taught us 4. Where we go next 5. Defense at AI speed 6. Learn more Every vulnerability has two clocks running. One belongs to the defender racing to find it; the...

vulnerabilities handled in Microsoft Developer Tools

Microsoft has addressed vulnerabilities in various Developer Tools. A malicious individual could exploit these vulnerabilities to carry out attacks that can cause the following types of damage: - Denial-of-Service DoS attacks - Bypass of security measures - Execution of arbitrary code user rights...