Tracked topic
GitHub is a web-based platform for hosting and collaborating on software using Git version control, offering features such as pull requests.
…New Rokarolla Android malware targets 217 banking, crypto apps NFCShare Android malware spreads via fake banking app updates on GitHub BTMOB Android malware service generates custom phishing payloads Android 17 to expand…
…A list of the domains discovered in this phishing campaign is available in Will Thomas’ analysis on GitHub. Test every layer before attackers do Security teams log 54% of successful attacks and…
…Confiant says that earlier variants of the SourTrade campaign used the StreamSaver project on GitHub to deliver the malicious payload. Since April, though, the operation switched to the same-origin ServiceWorker delivery…
…New ClickLock macOS malware traps users into revealing login password Nearly 300 GitHub repos pose as legit software to push malware New CrashStealer malware poses as Apple crash reporting tool Critical SimpleHelp…
…OpenClaw AI agent found falling for phishing attacks, spills user data New BioShocking attack manipulates AI browser into data theft Clean GitHub repo tricks AI coding agents into running malware Microsoft fixes…
…AsyncAPI npm packages infected with credential-stealing malware WordPress malware campaign hides payloads in Steam profiles FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware New HollowGraph malware uses Microsoft…
…information of 185,000 people 7-Eleven confirms data breach claimed by the ShinyHunters gang GitHub links repo breach to TanStack npm supply-chain attack Breach Data Breach France Hijack Instant Messaging…
…Designed as an alternative to GitHub Enterprise or GitLab and written in Go, Gogs is often exposed online for remote collaboration. This critical severity argument injection security flaw has yet to be…
…At the time, the phishing kit offered “customers” 40 distinct templates targeting popular online services such as Outlook, Hotmail, Gmail, Yahoo, ProtonMail, iCloud, GitHub, and Ledger. A new report from digital risk…
…Builder WordPress plugin flaws allow site credential theft Official CheckMarx Jenkins package compromised with infostealer GitHub announces npm security changes to tackle supply-chain attacks Compromise Plugin ShapedPlugin Supply Chain Supply Chain…