Congress Challenges CISA Over Massive Contractor Credential Leak
A leaked GitHub repository containing agency secrets has sparked a congressional investigation into CISA’s internal security posture.
> Search
6 results for “github”
SecurityWhen Internal Missteps Expose Critical Cloud Infrastructure
A contractor's exposed repository forced a rapid internal incident response at CISA to secure sensitive cloud credentials.
Cyber CrimeDormant Accounts Fuel Stealthy GitHub Reconnaissance Campaigns
Threat actors are weaponizing years-old accounts to map organizational structures and probe sensitive repositories via the GitHub API.
SecurityLessons in Transparency from CISA's Six-Month GitHub Exposure
A CISA postmortem reveals how a contractor's public repository leak serves as a critical guide for improving organizational security.
SecurityWhen Trust is Weaponized: Inside the Injective Labs SDK Compromise
A compromised developer account on GitHub allowed attackers to inject silent credential-stealing malware into a popular Web3 ecosystem.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.