Browsing Tag
GitHub
49 posts
ArtiPACKED Flaw Exposed GitHub Actions to Token Leaks
Discover how GitHub Actions artifacts leak sensitive authentication tokens, exposing popular open-source projects to security risks. Learn about…
August 16, 2024
3,000 Fake GitHub Accounts Used to Spread Malware in Stargazers Ghost Scheme
Cybercriminals are using GitHub to distribute malware through fake accounts. Learn how the “Stargazers Ghost” network operates and…
July 27, 2024
Researchers Claim Anyone Can Access Deleted, Private GitHub Repository Data
Cybersecurity researchers have revealed a GitHub design flaw that allows access to deleted and private repository data. Learn…
July 25, 2024
Trojanized jQuery Infiltrates npm, GitHub, and CDNs: Thousands of Packages at Risk
Phylum uncovers large-scale trojanized jQuery attacks targeting npm, GitHub, and CDNs. Malicious actors steal user form data through…
July 9, 2024
Shadow IT: Personal GitHub Repos Expose Employee Cloud Secrets
Alerted by a recent discovery of employee personal GitHub repos exposing internal Azure and Red Hat secrets, this article dives into the dangers of Shadow IT and offers solutions to prevent cloud credential leaks and secure your cloud environment.
May 16, 2024
GitHub Comments Abused to Spread Malware in Fake Microsoft Repositories
Hackers are exploiting GitHub comments to spread malware disguised as Microsoft software downloads tricking users into downloading malware.
April 23, 2024
Mintlify Confirms Data Breach Through Compromised GitHub Tokens
Mintlify Scrambles After Security Breach, Revokes Tokens and Implements New Safeguards!
March 20, 2024
OpenSSF Launches Malicious Packages Repository
The launch of the Malicious Packages repository comes at a time when cyberattacks, leveraging malicious open source packages, are on the rise.
October 17, 2023
Malware Concealed as Dependabot Contributions Strikes GitHub Projects
Malicious code disguised as Dependabot contributions hits hundreds of GitHub repositories.
September 27, 2023
Microsoft AI Researchers Expose 38TB of Top Sensitive Data
Another day, another data security incident at Microsoft.
September 18, 2023