Search: “GitHub Actions”

63 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 355 Malware 277 Ransomware 160 Exploit / PoC 149 Data breach 110 Threat actor 92 Policy & legal 57 AI safety & security 56 Industry 37 AI tools & infra 37 Phishing & fraud 29 Tools 26 AI research 12 AI industry 9

SeverityAll critical 489 high 450 medium 298 low 96 info 92

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

The Hacker NewsMar 24, 06:31 UTC · Mar 24, 2026Data breach

57

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-336341

60

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

The Hacker NewsJul 23, 11:28 UTC · Jul 23, 2026Data breach CVE-2026-419401

60

Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

The Hacker NewsMay 19, 09:12 UTC · May 19, 2026Data breach

57

Chainguard locks down CI/CD with secure-by-default actions

Help Net SecurityMar 17, 00:00 UTC · Mar 17, 2026Data breach1

57

Checkmarx supply chain attack impacts Bitwarden npm distribution path

Security AffairsApr 25, 21:59 UTC · Apr 25, 2026Data breach

57

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets

The Hacker NewsMar 11, 12:57 UTC · Mar 11, 2026Data breach CVE-2026-283531

60

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

The Hacker NewsMay 1, 09:43 UTC · May 1, 2026Data breach

57

Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack

Help Net SecuritySep 16, 00:00 UTC · Sep 16, 2025Data breach

57

Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain Attack

The Hacker NewsSep 22, 15:17 UTC · Sep 22, 2025Data breach1

57

Malicious LiteLLM versions linked to TeamPCP supply chain attack

Security AffairsMar 25, 08:50 UTC · Mar 25, 2026Data breach

57

Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

Infosecurity MagazineMay 20, 15:00 UTC · May 20, 2026Data breach

57

Nothing to steal? Let’s wipe. We’re analyzing the Shai Hulud 2.0 npm worm

Kaspersky SecurelistDec 4, 15:46 UTC · Dec 4, 2025Data breach1

57

Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens

The Hacker NewsApr 24, 17:03 UTC · Apr 24, 2026Data breach1

57

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

The Hacker NewsJul 20, 05:15 UTC · Jul 20, 2026Data breach1

57

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Infosecurity MagazineJun 2, 10:00 UTC · Jun 2, 2026Data breach

57

Self-Replicating Worm Hits 180+ Software Packages

Krebs on SecuritySep 15, 00:00 UTC · Sep 15, 2025Data breach2

57

Codecov discloses 2.5-month

The RecordJan 26, 00:00 UTC · Jan 26, 2023Data breach1

57

AI agent deception moves from theory to reality in UK cyber tests

Help Net SecurityAug 5, 00:00 UTC · Aug 5, 2026Data breach

57

Anthropic AI agent faked identities, phished real developers in UK government hacking test

The RecordAug 5, 13:05 UTC · Aug 5, 2026Data breach1

57

A Malicious VS Code Extension Just Breached GitHub 's Internal Repositories

Security AffairsMay 20, 08:50 UTC · May 20, 2026Data breach

57

Docker Hub Suffers a Data Breach, Asks Users to Reset Password

The Hacker NewsApr 27, 11:47 UTC · Apr 27, 2019Data breach

57

Akeyless introduces AI Agent Identity Security for safer AI operations

Help Net SecurityOct 30, 00:00 UTC · Oct 30, 2025Data breach

57

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

The Hacker NewsJun 10, 04:50 UTC · Jun 10, 2026Data breach1

57

LastPass Admits to Severe Data Breach, Encrypted Password Vaults Stolen

The Hacker NewsDec 29, 06:12 UTC · Dec 29, 2022Data breach

57

GlassWorm Attack Uses Stolen GitHub Tokens to Force

The Hacker NewsMar 21, 07:03 UTC · Mar 21, 2026Data breach

57

NUVOLA: the new Cloud Security tool

Security AffairsSep 28, 08:26 UTC · Sep 28, 2022Data breach

57

Sensitive Data Sharing Risks Heightened as GenAI Surges

Infosecurity MagazineJul 17, 12:10 UTC · Jul 17, 2024Data breach

57

18 Malicious npm Packages Deliver Cross

The Hacker NewsAug 3, 18:43 UTC · Aug 3, 2026Data breach

57

Handling people's personal data is sensitive business

Troy HuntNov 22, 10:50 UTC · Nov 22, 2016Data breach

57

How to Tackle the Top SaaS Challenges of 2023

The Hacker NewsFeb 24, 14:01 UTC · Feb 24, 2023Data breach

57

The FBI will feed hacked passwords directly into Have I Been Pwned

The RecordDec 12, 00:00 UTC · Dec 12, 2022Data breach

57

Former Amazon Employee Found Guilty in 2019 Capital One Data Breach

The Hacker NewsJun 21, 13:05 UTC · Jun 21, 2022Data breach

57

35% of exposed API keys still active, posing major security risks

Help Net SecurityAug 13, 00:00 UTC · Aug 13, 2024Data breach

57

LexisNexis Risk Solutions says 364,000 impacted by breach involving GitHub data

The RecordMay 28, 16:05 UTC · May 28, 2025Data breach

57

It Might Be Our Data, But It’s Not Our Breach

Krebs on SecurityAug 11, 18:52 UTC · Aug 11, 2022Data breach

57

Supply chains, AI, and the cloud: The biggest failures (and one success) of 2025

Ars Technica · SecurityDec 31, 13:15 UTC · Dec 31, 2025Data breach

57

Microsoft Warns Poisoned MCP Tool Descriptions Can Make AI Agents Leak Data

The Hacker NewsJun 30, 17:46 UTC · Jun 30, 2026Data breach

57

Netflix releases the Stethoscope tool to improve security

Security AffairsFeb 23, 11:48 UTC · Feb 23, 2017Data breach

57