[ad_1] Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561 GitHub repositories within a six-hour window. « Using throwaway accounts …
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows Read More
[ad_1] Ravie LakshmananMay 21, 2026Supply Chain Attack / Developer Tools GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an …
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension Read More
[ad_1] Ravie LakshmananMay 20, 2026Supply Chain Attack / Cloud Security Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems …
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack Read More
[ad_1] Ravie LakshmananMay 20, 2026Malware / Cloud Security GitHub on Tuesday said it’s investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the …
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories Read More
[ad_1] Ravie LakshmananMay 19, 2026Software Security / Malware In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helperto run malicious code that harvests …
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials Read More
[ad_1] Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts …
CISA Admin Leaked AWS GovCloud Keys on Github – Krebs on Security Read More
[ad_1] Ravie LakshmananMay 17, 2026Data Breach / Cybercrime Grafana has disclosed that an « unauthorized party » obtained a token that granted them the ability to access the company’s GitHub environment and …
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt Read More
[ad_1] Ravie LakshmananMay 04, 2026Cybersecurity / Hacking This week, the shadows moved faster than the patches. While most teams were still triaging last month’s alerts, attackers had already turned control …
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More Read More
[ad_1] This week’s Department of Know is hosted by Rich Stroffolinowith guests Janet HeinsCISO, ChenMedand TC NiedzialkowskiHead of IT & Security, Open door. Missed the live show? Check it out …
GitHub drama, AI deletes production data, Claude Security Beta Read More
[ad_1] GitHub yesterday disclosed CVE-2026-3854, a high severity (8.7 CVSS) vulnerability identified in GitHub Enterprise Server that would grant an attacker with push access to a repository to achieve remote …
Reverse Engineering With AI Unearths High-Severity GitHub Bug Read More