Tag: github
154 articles

Google Acquisition Target Wiz Connects New Supply Chain Attack to 23,000 Compromised GitHub Repositories
Google’s acquisition target Wiz links a new supply chain attack to 23,000 compromised GitHub repositories, highlighting critical security vulnerabilities.

CISO Insights: Strategies for Measuring and Managing Human Risk
Discover effective strategies for CISOs to measure and manage human risk, enhancing cybersecurity and fostering a culture of security awareness.

GitHub Action Supply Chain Breach Reveals CI/CD Secrets
GitHub Action supply chain breach exposes critical CI/CD secrets, highlighting vulnerabilities in software development processes and the need for enhanced security.

GitHub Action Breach Exposes CI/CD Secrets in Over 23,000 Repositories
GitHub Action breach reveals CI/CD secrets in 23,000+ repositories, raising concerns over security and data protection in software development.

Microsoft Acknowledges GitHub Malware Incident Affecting Nearly One Million Devices
Microsoft confirms a GitHub malware incident impacting nearly one million devices, highlighting the need for enhanced security measures.

Microsoft Reports Malvertising Campaign Affected 1 Million PCs
Microsoft reveals a malvertising campaign that impacted 1 million PCs, highlighting the growing threat of online advertising-based malware.

GitVenom Malware Swindles $456K in Bitcoin Through Phony GitHub Projects
GitVenom malware scams $456K in Bitcoin by exploiting fake GitHub projects, highlighting the risks of malicious code in open-source repositories.

Malicious Advertisements Exploit GitHub to Target Freelance Developers
Malicious ads exploit GitHub, targeting freelance developers with deceptive tactics to compromise security and steal sensitive information.

North Korea’s JavaScript Implant: A New Tactic for Cryptocurrency Theft
Discover how North Korea’s JavaScript implant is revolutionizing cryptocurrency theft tactics, posing new threats to digital asset security.

Lazarus Group Unleashes Marstech1 JavaScript Implant in Targeted Attacks on Developers
Lazarus Group targets developers with the Marstech1 JavaScript implant, enhancing their cyberattack capabilities in a new wave of targeted threats.