#GitHub
Posts tagged GitHub. 8 articles.
supply chain attack|6 min read
Red Hat npm compromise proves provenance alone is not enough
Read More
supply chain attack|6 min read
GitHub breach forces GHES signing-key rotation
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
supply chain attack|4 min read
Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack
Read More
Threat Hunting & Intel|5 min read
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Read More
Threat Hunting & Intel|8 min read
FakeGit: GitHub malware campaign hits 600+ repos
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- AI Agents Turn Retail Skimming Into a Low-Cost Cybercrime Operation
- EvilTokens disruption gives defenders a short window to clean up device-code phishing risk
- North Korea's Contagious Interview campaign turns job tests into malware delivery
- CVE-2026-87902: WordPress Template RCE Risk
- Rust crate owners targeted in video-call supply chain campaign