#GitHub
Posts tagged GitHub. 8 articles.
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
supply chain attack|6 min read
GitHub breach forces GHES signing-key rotation
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
supply chain attack|4 min read
Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack
Read More
Threat Hunting & Intel|5 min read
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Read More
Threat Hunting & Intel|8 min read
FakeGit: GitHub malware campaign hits 600+ repos
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- WordPress Site Owners Face Mass Exploitation of Super Forms and Elementor Pro Upload Flaws
- Dropbox breach shows why third-party identity links need zero trust
- CISA's New KEV Additions Put Edge and AI Control Planes on a Short Patch Clock
- ServiceNow Critical Flaws Expose Enterprise Workflows
- PaperCut NG/MF zero-day chain: CISA adds actively exploited flaws to KEV