[ad_1] Cybersecurity researchers have disclosed details of a new automated campaign called Megalodon that has pushed 5,718 malicious commits to 5,561 GitHub repositories within a six-hour window. « Using throwaway accounts …
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows Read More
[ad_1] Ravie LakshmananMay 21, 2026Supply Chain Attack / Developer Tools GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of an …
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension Read More
[ad_1] Shadow IT Is an Insider Threat (And Not a Malicious One) with ThreatLocker – CISO Series …
Shadow IT Is an Insider Threat (And Not a Malicious One) with ThreatLocker Read More
[ad_1] Ravie LakshmananMay 12, 2026Supply Chain Attack / Software Security RubyGemsthe standard package manager for the Ruby programming language, has temporarily paused account sign ups following what has been described …
RubyGems Suspends New Signups After Hundreds of Malicious Packages Are Uploaded Read More
[ad_1] Ravie LakshmananApr 22, 2026Cloud Security / Software Security Cybersecurity researchers have warned of malicious images pushed to the official « checkmarx/kics » Docker Hub repository. In an alert published today, software …
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain Read More
[ad_1] Ravie LakshmananApr 20, 2026Open Source / Server Security A critical security vulnerability has been disclosed in SGLang that, if successfully exploited, could result in remote code execution on susceptible …
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files Read More