The GitHub Actions Attack Pattern Your CI Security Scanners Miss
…ActiveState Cordyceps Cybersecurity GitHub Actions Supply Chain Attack Previous Article
Search
Related topics:
GitHub
Glassworm botnet disrupted after resilient C2 infrastructure takedown
…Later attack waves extended to GitHub repositories and npm packages, with one campaign in March impacting more than 400 software artifacts . In a more recent attack, Glassworm operators planted dozens of dormant…
Pharma giant Novo Nordisk discloses breach of clinical trials data
…Novo Nordisk is now investigating the incident with the help of external cybersecurity experts to assess the full impact and scope of the breach. "We are working to bring the affected systems…
Microsoft working on Defender patch for RoguePlanet zero-day
…He shared a proof-of-concept exploit in a self-hosted Git repository, claiming that Microsoft had previously targeted and removed their repos hosting exploits on GitHub and GitLab. "The exploit is…
Apple blocked over $11 billion in App Store fraud in 6 years
…How to Spot it Before it Empties Your Wallet Ukraine identifies infostealer operator tied to 28,000 stolen accounts GitHub investigates internal repositories breach claimed by TeamPCP Microsoft blames macOS update for…
Early Warning Signs of Supply-Chain Attacks Live in the Dark Web
…It may advertise GitHub access, private repositories, source code, API keys, OAuth tokens, cloud credentials, CI/CD data, or a vendor-related leak. The supply-chain risk comes from where that access…
CISA warns of max severity Ubiquiti flaws exploited in attacks
…Bishop Fox has also released a free detection script on GitHub to help defenders discover vulnerable instances in their environment. The security issue exploited in Lantronix servers is tracked as CVE-2025…
Phishing poses as big-brand job interview to steal Google accounts
…Will Thomas, senior advisor at cybersecurity intelligence and threat hunting company Team Cymru, analyzed the campaign and discovered that the phishing email pretends to be from “a recruiter looking to hire people…
French govt messaging service breached in account hijacking attack
…Developed in-house by DINUM in collaboration with ANSSI (the French Cybersecurity Agency) in 2018, Tchap is an instant messaging service and collaboration tool based on the decentralized Matrix protocol, designed exclusively…
Over 116,000 Mincraft systems infected in WeedHack malware campaign
…Telemetry data from cybersecurity company McAfee shows that WeedHack has impacted 116,464 systems, averaging between 2,000 and 3,000 infections every day. Most victims are in the United States, Germany…