Researchers say the campaign abused compromised access tokens and deploy keys to inject malicious GitHub Actions workflows ...
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public ...
CISA GitHub credential leak exposed AWS GovCloud admin keys, plaintext passwords, and an RSA private key for six months via a ...
A supply chain attack targeting the Laravel Lang localization packages has exposed developers to a sophisticated ...
A malware-spreading scumbag swimming through GitHub pushed malicious commits to more than 5,500 repositories on Monday as ...
Megalodon pushed 5,718 malicious GitHub commits in 6 hours, exposing CI secrets and cloud credentials at scale.
GitHub rotated keys potentially exposed by a vulnerability patched in December that could let attackers access credentials within production containers via environment variables. This unsafe ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results