Search: “github”

305 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 334 Threat actor 307 Industry 191 Policy & legal 156 AI safety & security 140 Phishing & fraud 127 AI tools & infra 121 Tools 104 Research 55 Model release 41

SeverityAll critical 1460 high 1464 medium 1124 low 459 info 292

GitHub to introduce mandatory 2FA authentication starting March 13

Help Net SecurityMar 9, 00:00 UTC · Mar 9, 2023Threat actor

45

GitHub investigating crypto-mining campaign abusing its server infrastructure

The RecordJan 26, 00:00 UTC · Jan 26, 2023Threat actor

45

GitHub to revoke stolen code signing certificates for GitHub Desktop and Atom

Security AffairsJan 31, 15:21 UTC · Jan 31, 2023Threat actor1

45

GitHub Confirms Signing Certificates Stolen in Cyber

Infosecurity MagazineJan 31, 18:00 UTC · Jan 31, 2023Threat actor1

57

Stolen OAuth tokens used to download data from dozens of orgs, GitHub warns

Security AffairsApr 17, 14:58 UTC · Apr 17, 2022Threat actor

45

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

The Hacker NewsApr 26, 07:45 UTC · Apr 26, 2026Threat actor

57

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor1

57

GitHub project maintainers targeted with fake security alert

Help Net SecurityApr 2, 08:49 UTC · Apr 2, 2025Threat actor1

45

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

The Hacker NewsJan 12, 04:20 UTC · Jan 12, 2024Threat actor

45

Salesforce-owned Heroku faces backlash over handling of stolen user credentials

The RecordJan 12, 00:00 UTC · Jan 12, 2023Threat actor

45

Attackers are abusing GitHub infrastructure to mine cryptocurrency

Security AffairsApr 3, 10:04 UTC · Apr 3, 2021Threat actor

45

GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects

Security AffairsFeb 26, 06:27 UTC · Feb 26, 2025Threat actor1

57

Attackers impersonate CircleCI to compromise GitHub accounts

Security AffairsSep 25, 16:34 UTC · Sep 25, 2022Threat actor

45

Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

The Hacker NewsSep 23, 14:04 UTC · Sep 23, 2022Threat actor

45

GitHub: Nearly 100K NPM credentials stolen in April OAuth token attack

Security AffairsMay 28, 11:01 UTC · May 28, 2022Threat actor1

45

Hackers Using CAPTCHA Bypass Tactics in Freejacking Campaign on GitHub

The Hacker NewsJan 7, 17:47 UTC · Jan 7, 2023Threat actor

45

Ongoing malvertising campaign targets European IT workers with fake GitHub Desktop installers

Help Net SecuritySep 9, 00:00 UTC · Sep 9, 2025Threat actor

57

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

The Hacker NewsNov 12, 14:00 UTC · Nov 12, 2024Threat actor

57

90% of exposed secrets on GitHub remain active for at least five days

Help Net SecurityMar 15, 00:00 UTC · Mar 15, 2024Threat actor

45

EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHub

The Hacker NewsNov 2, 03:54 UTC · Nov 2, 2023Threat actor1

45

GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git Operations

The Hacker NewsMar 25, 05:40 UTC · Mar 25, 2023Threat actor

45

Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth Breach

The Hacker NewsMay 31, 04:12 UTC · May 31, 2022Threat actor1

45

GitHub Says Recent Attack Involving Stolen OAuth Tokens Was "Highly Targeted"

The Hacker NewsMay 28, 08:22 UTC · May 28, 2022Threat actor

45

Heroku Forces User Password Resets Following GitHub OAuth Token Theft

The Hacker NewsMay 9, 04:57 UTC · May 9, 2022Threat actor

45

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

The Hacker NewsJul 10, 06:30 UTC · Jul 10, 2026Threat actor

57

Meddler-in-the

Palo Alto Unit 42Jun 5, 17:08 UTC · Jun 5, 2024Threat actor

45

“gitgub” campaign targets Github users with RisePro info

Security AffairsMar 17, 15:01 UTC · Mar 17, 2024Threat actor

45

Nearly 13 Million Secrets Spilled Via Public GitHub Repositories

Infosecurity MagazineMar 13, 09:30 UTC · Mar 13, 2024Threat actor

45

New York Times source code compromised via exposed GitHub token

Security AffairsJun 8, 20:34 UTC · Jun 8, 2024Threat actor1

45

Malicious Package on PyPI Hides Behind Image Files, Spreads Via GitHub

Infosecurity MagazineNov 9, 17:00 UTC · Nov 9, 2022Threat actor1

45

GitCaught: Threat Actor Leverages GitHub Repository for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor

45

Dropbox Breach: Hackers Unauthorizedly Accessed 130 GitHub Source Code Repositories

The Hacker NewsNov 3, 03:41 UTC · Nov 3, 2022Threat actor

45

North Korea-linked Lazarus APT used Windows Update client and GitHub in recent attacks

Security AffairsJan 27, 20:30 UTC · Jan 27, 2022Threat actor

57

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

Wiz CIRT published an investigation playbook for GitHub PAT compromise after responding to a coordinated multi-organization campaign.

Wiz's Computer Incident Response Team shared lessons from its response to a coordinated campaign compromising GitHub personal access tokens across multiple organizations. The post provides a practical playbook covering detection, scoping, and investigation steps for token compromise. Specific victim names, affected counts, and attribution are not provided in the announcement.

Wiz BlogAug 13, 15:04 UTC · Aug 13, 2026Threat actor in the wild1

55

Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets

The Hacker NewsNov 27, 03:43 UTC · Nov 27, 2025Threat actor

60

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2024Threat actor CVE-2018-08241

60

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

The Hacker NewsJan 23, 18:40 UTC · Jan 23, 2024Threat actor1

57

GitHub Repojacking Bug Could've Allowed Attackers to Takeover Other Users' Repositories

The Hacker NewsOct 31, 09:17 UTC · Oct 31, 2022Threat actor

57

Experts Detect Pakistan-Linked Cyber Campaigns Aimed at Indian Government Entities

The Hacker NewsFeb 10, 10:41 UTC · Feb 10, 2026Threat actor1

57

Salesloft: GitHub Account Breach Was Ground Zero in Drift Campaign

Infosecurity MagazineSep 9, 10:00 UTC · Sep 9, 2025Threat actor1

45