Today we're publicly disclosing #HellsKeychain. We proved that by using a chain of vulnerabilities, it's possible to gain access to an internal CI/CD server & carry out a supply-chain attack against IBM Cloud's managed DB service>>