GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code ExtensionInfosecurity Magazine·May 21, 14:45 UTC · May 21, 2026Data breachCVE-2026-48027160
Veza integrates with GitHub to secure customers’ dataHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2023Data breach160
TeamPCP breached GitHub's internal codebase via poisoned VS Code extensionHelp Net Security·May 20, 00:00 UTC · May 20, 2026Data breach60
GitHub Internal Repositories Breached via Malicious Nx Console VS Code ExtensionThe Hacker News·May 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321CVE-2026-4802760
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Massive GitHub analysis reveals 10 million secrets hidden in 1 billion commitsHelp Net Security·Mar 9, 00:00 UTC · Mar 9, 2023Data breach160
How Secrets Lurking in Source Code Lead to Major BreachesThe Hacker News·Feb 20, 17:07 UTC · Feb 20, 2023Data breach60
Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure processThe Record·Jun 4, 13:40 UTC · Jun 4, 2026Data breach160
Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploitedHelp Net Security·May 24, 00:00 UTC · May 24, 2026Data breach in the wildCVE-2026-42945CVE-2026-45585CVE-2026-41091+1 CVEs60
Shai-Hulud worm returns stronger and more automated than ever beforeCyberScoop·Nov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild60
⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Data breachCVE-2025-22457CVE-2025-24061CVE-2025-2407+15 CVEs60
Attackers breached Docker Hub, grabbed keys and tokensHelp Net Security·Apr 29, 00:00 UTC · Apr 29, 2019Data breach160
Secrets sprawl: Protecting your critical secretsHelp Net Security·Mar 21, 00:00 UTC · Mar 21, 2024Data breach60
Mercedes-Benz accidentally exposed sensitive data, including source codeSecurity Affairs·Jan 29, 20:16 UTC · Jan 29, 2024Data breach60
Why High Tech Companies Struggle with SaaS SecurityThe Hacker News·May 15, 00:00 UTC · May 15, 2023Data breach60
Mini Shai-Hulud returns, compromising hundreds of npm packagesCyberScoop·May 19, 21:21 UTC · May 19, 2026Data breach in the wild60
Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limitsHelp Net Security·Apr 19, 00:00 UTC · Apr 19, 2026Data breach in the wildCVE-2026-34621CVE-2026-39813CVE-2026-3980860
Hackers breached a the PHP 's Git Server and inserted a backdoor in the codeSecurity Affairs·Mar 29, 14:22 UTC · Mar 29, 2021Data breach160
Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential RotationThe Hacker News·Jul 30, 07:40 UTC · Jul 30, 2026Data breachCVE-2026-42897CVE-2025-6637660
Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHelp Net Security·Jul 26, 00:00 UTC · Jul 26, 2026Data breach in the wildCVE-2026-6875CVE-2026-15409CVE-2026-15410+4 CVEs60
Week in review: Accenture data breach, great open-source cybersecurity toolsHelp Net Security·Jul 12, 00:00 UTC · Jul 12, 2026Data breach in the wildCVE-2026-48282CVE-2026-55255CVE-2026-50656160
#Infosec2025: How CISOs Can Stay Ahead of Evolving Cloud ThreatsInfosecurity Magazine·May 19, 09:00 UTC · May 19, 2025Data breach60
Exposed Kubernetes secrets can fuel supply chain attacksSecurity Affairs·Nov 24, 12:27 UTC · Nov 24, 2023Data breach60
Microsoft AI researchers exposed sensitive signing keys, internal messagesCyberScoop·Sep 18, 18:55 UTC · Sep 18, 2023Data breach in the wild60
Generative-AI apps & ChatGPT: Potential risks and mitigation strategiesThe Hacker News·Jun 22, 13:15 UTC · Jun 22, 2023Data breach60
Are Source Code Leaks the New Threat Software vendors Should Care About?The Hacker News·Apr 7, 14:14 UTC · Apr 7, 2023Data breach160
SolarWinds Blames Intern for 'solarwinds123' Password LapseThe Hacker News·Mar 2, 08:51 UTC · Mar 2, 2021Data breach60
Mimecast confirms SolarWinds attackers breached security certificate, 'potentially exfiltrated' credentialsCyberScoop·Jan 26, 20:15 UTC · Jan 26, 2021Data breach in the wild60
Capital One announces massive data breach; lone suspect arrested in SeattleCyberScoop·Jul 31, 15:30 UTC · Jul 31, 2019Data breach in the wild60
Hackers claim to have stolen offensive cyber weapons from NSACyberScoop·Aug 15, 18:00 UTC · Aug 15, 2016Data breach in the wild60
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC releasedHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121CVE-2026-63077CVE-2026-20316+1 CVEs60
ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, StateThe Hacker News·May 27, 15:52 UTC · May 27, 2026Data breach60
Attack on axios software developer tool threatens widespread compromisesCyberScoop·Mar 31, 18:24 UTC · Mar 31, 2026Data breach in the wild160
GitLab addressed critical auth bypass flaws in CE and EE)Security Affairs·Mar 13, 22:05 UTC · Mar 13, 2025Data breachCVE-2025-25291CVE-2025-25292CVE-2025-27407160
Rubrik boosts protection for cloud, SaaS, and on-premises environmentsHelp Net Security·Mar 4, 00:00 UTC · Mar 4, 2025Data breach60
The Secret Weakness Execs Are Overlooking: NonThe Hacker News·Oct 3, 15:06 UTC · Oct 3, 2024Data breach60
Week in review: CrowdStrike update causes widespread IT outage, critical Splunk Enterprise flawHelp Net Security·Jul 29, 16:16 UTC · Jul 29, 2024Data breachCVE-2024-36991CVE-2024-39929CVE-2024-20401+2 CVEs60
UNC3886 Uses Fortinet, VMware 0-Days and Stealth Tactics in LongThe Hacker News·Jun 22, 05:45 UTC · Jun 22, 2024Data breachCVE-2022-41328CVE-2022-22948CVE-2023-20867+1 CVEs60