#GitHub
Posts tagged GitHub. 8 articles.
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
supply chain attack|6 min read
GitHub breach forces GHES signing-key rotation
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
supply chain attack|4 min read
Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack
Read More
Threat Hunting & Intel|5 min read
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Read More
Threat Hunting & Intel|8 min read
FakeGit: GitHub malware campaign hits 600+ repos
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- Microsoft Fixes Exploited Windows Shell Zero-Day Behind Mark-of-the-Web Bypass
- Another Critical NetScaler Flaw Keeps Edge Risk in the Spotlight
- China-Linked Operators Turn Edge Devices Into a Data-Theft Workbench
- China-Linked Operators Blend Botnets, Phishing, and Hands-On Intrusions
- Zimbra Exploitation Turns Mail Servers Into Credential Staging Points