Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
22 results for “github”
Cyber Crime
AI & MLCopilot CLI's Model Lottery Problem
Adversa AI says encrypted 'zombie instructions' on web pages can extract secrets through GitHub Copilot CLI, depending on which model handles the session.
Cyber CrimeSigned Driver, Dead AV: A Fake LastPass Trap
A counterfeit GitHub installer for LastPass Authenticator loads a Microsoft-signed kernel driver that kills security tools before stealing passwords.
Cyber CrimeCrowdSec Ties Code Theft to TanStack Flaw
CrowdSec says about 300 repositories were hit and links the theft to a May 2026 TanStack supply chain attack.
Cyber CrimeAPT36 Uses GitHub Repos as Stealth C2
Zscaler ThreatLabz says Transparent Tribe is running four new tools against Indian and Afghan government targets, hiding command traffic inside private GitHub repositories.
AI & MLOpenAI Details AI Models Going Rogue
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
Tech NewsCursor's Origin Aims at GitHub's Woes
AI startup Cursor, now part of SpaceX, launches Origin, a code-hosting platform that integrates with GitHub amid user frustration over outages.
SecuritySnowflake CI/CD Flaw Opens Door to Issue-Based Injection
A GitHub Actions workflow flaw in Snowflake's connector repo allowed crafted issues to execute commands with exposed Jira credentials.
Tech NewsGitHub Outage Disrupts Developer Services
GitHub confirms widespread outage affecting core services, with error rates reaching 50% for downloads.
SecurityMozilla Rotates GPG Signing Key After GitHub Exposure
Mozilla replaced the GPG key for Firefox and Thunderbird after an unencrypted copy leaked to a private GitHub repo.
Cyber CrimeChainDrop Worm Exploits npm Ecosystem
A self-propagating malware campaign has compromised over 1,300 npm packages, leveraging legitimate GitHub workflows to spread.
SecurityCritical Shell Injection Hits Wazuh Workflows
A critical shell injection vulnerability in Wazuh workflows allows attackers to execute arbitrary commands and steal sensitive credentials via pull requests.
SecurityIndia Targets Decentralized App Code
A government demand to remove open-source repositories from GitHub challenges the legal limits of controlling offline messaging.
SecurityAI Agents Vulnerable to AgentBaiting
A campaign dubbed FakeGit uses 7,600 fake GitHub repositories to trick AI agents into installing the SmartLoader malware family.
SecurityAsyncAPI Breach Exposes CI/CD Pipeline Risk
A sophisticated supply chain attack used legitimate GitHub pipelines to push malicious code via the AsyncAPI npm namespace.
Cyber CrimeGitHub Malware Campaign Hits 292 Repos
A malicious campaign using hundreds of fake repositories is actively deploying the BoryptGrab infostealer to compromised machines.
Congress Challenges CISA Over Massive Contractor Credential Leak
A leaked GitHub repository containing agency secrets has sparked a congressional investigation into CISA’s internal security posture.
SecurityWhen Internal Missteps Expose Critical Cloud Infrastructure
A contractor's exposed repository forced a rapid internal incident response at CISA to secure sensitive cloud credentials.
Cyber CrimeDormant Accounts Fuel Stealthy GitHub Reconnaissance Campaigns
Threat actors are weaponizing years-old accounts to map organizational structures and probe sensitive repositories via the GitHub API.
SecurityLessons in Transparency from CISA's Six-Month GitHub Exposure
A CISA postmortem reveals how a contractor's public repository leak serves as a critical guide for improving organizational security.
SecurityWhen Trust is Weaponized: Inside the Injective Labs SDK Compromise
A compromised developer account on GitHub allowed attackers to inject silent credential-stealing malware into a popular Web3 ecosystem.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.