Github got Hacked by CATS
You NEED to try these 12 open-source AI projects RIGHT NOW
His Windows PC Testified Against Him #cybersecurity #privacy
HUGE npm axios supply chain attack
The Supply Chain Attacks All Have One Thing in Common. It's GitHub.
Before You Trust Another Self-Hosted App, Watch This
Hackers make FAKE notifications
It's Bigger Than TeamPCP. Open Source Is Under Siege.
Ever since appearing on the cybersecurity scene, Nightmare-Eclipse (aka Chaotic-Eclipse) has probably been the largest thorn in the side of the Microsoft Security Response Center. The long-running saga between…
…on GitHub. Alexis has 20 years of experience defending critical national and private sector networks, spanning positions with the Department of Defense and the Department of Homeland Security’s Cybersecurity and Infrastructure…
A former IBM cybersecurity executive accused the company of getting hacked three times in the previous decade by foreign governments and then covering up the breaches. In a lawsuit unsealed this week…
…The GitHub breach is just the latest incident in what has become the longest-running spree of software supply chain attacks ever, with no end in sight. According to cybersecurity firm Socket…
‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub - Gizmodo
1-Click GitHub Token Stealing via a VSCode Bug
A new GitHub attack dubbed Megalodon compromised more than 5.5K repositories
https://cybernews.com/security/github-bans-researcher-releasing-windows-zero-days/
GitHub’s internal repositories were breached by a malicious VSCode extension: https://xcancel.com/github/status/2056949168208552080 Microsoft closed an earlier request for update cooldowns as not planned but hopefully th…
…While Microsoft quickly rolled out Claude Fable 5 to its GitHub Copilot and Foundry customers, I’m told the model isn’t available in the model picker that Microsoft employees use for…
…Breach Data Breach Data Theft GitHub npm Nx Console TanStack TeamPCP VS Code Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a…
…as zero-day Credential Theft GitHub Microsoft MSRC Visual Studio Code VSCode Zero-Day Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over…
…The group TeamPCP successfully compromised GitHub repositories for LiteLLM—a widely used AI gateway. By poisoning packages on PyPI, they extracted AWS keys and GitHub tokens, exposing AI API credentials across numerous…
…On Tuesday, cybersecurity firms StepSecurity and SafeDep warned of the latest wave of supply-chain attacks, which aim to compromise developers of popular open source projects and use that access to plant…
…These attacks can be effective because they exploit the trust that companies put into code that’s hosted on platforms like GitHub, and the workers behind that code. “Adversaries are no longer…
