#GitHub
Posts tagged GitHub. 8 articles.
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
supply chain attack|6 min read
GitHub breach forces GHES signing-key rotation
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
supply chain attack|4 min read
Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack
Read More
Threat Hunting & Intel|5 min read
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Read More
Threat Hunting & Intel|8 min read
FakeGit: GitHub malware campaign hits 600+ repos
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- Zimbra Exploitation Turns Mail Servers Into Credential Staging Points
- Flax Typhoon Tool Seizure Gives Defenders a Fresh Hunting Window
- Atlassian Emergency Patches Put Data Center Exposure Back in Focus
- ASOS cyber incident: why hijacked customer notifications deserve breach-level response
- CVE-2026-104286: FortiMail File Write Zero-Day