GitHub to introduce mandatory 2FA authentication starting March 13Help Net Security·Mar 9, 00:00 UTC · Mar 9, 2023Threat actor45
GitHub to revoke stolen code signing certificates for GitHub Desktop and AtomSecurity Affairs·Jan 31, 15:21 UTC · Jan 31, 2023Threat actor145
Stolen OAuth tokens used to download data from dozens of orgs, GitHub warnsSecurity Affairs·Apr 17, 14:58 UTC · Apr 17, 2022Threat actor45
Salesforce-owned Heroku faces backlash over handling of stolen user credentialsThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Threat actor45
Attackers are abusing GitHub infrastructure to mine cryptocurrencySecurity Affairs·Apr 3, 10:04 UTC · Apr 3, 2021Threat actor45
GitHub: Nearly 100K NPM credentials stolen in April OAuth token attackSecurity Affairs·May 28, 11:01 UTC · May 28, 2022Threat actor145
Hackers Using CAPTCHA Bypass Tactics in Freejacking Campaign on GitHubThe Hacker News·Jan 7, 17:47 UTC · Jan 7, 2023Threat actor45
90% of exposed secrets on GitHub remain active for at least five daysHelp Net Security·Mar 15, 00:00 UTC · Mar 15, 2024Threat actor45
EleKtra-Leak Cryptojacking Attacks Exploit AWS IAM Credentials Exposed on GitHubThe Hacker News·Nov 2, 03:54 UTC · Nov 2, 2023Threat actor145
GitHub Swiftly Replaces Exposed RSA SSH Key to Protect Git OperationsThe Hacker News·Mar 25, 05:40 UTC · Mar 25, 2023Threat actor45
Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth BreachThe Hacker News·May 31, 04:12 UTC · May 31, 2022Threat actor145
GitHub Says Recent Attack Involving Stolen OAuth Tokens Was "Highly Targeted"The Hacker News·May 28, 08:22 UTC · May 28, 2022Threat actor45
Heroku Forces User Password Resets Following GitHub OAuth Token TheftThe Hacker News·May 9, 04:57 UTC · May 9, 2022Threat actor145
Nearly 13 Million Secrets Spilled Via Public GitHub RepositoriesInfosecurity Magazine·Mar 13, 09:30 UTC · Mar 13, 2024Threat actor45
New York Times source code compromised via exposed GitHub tokenSecurity Affairs·Jun 8, 20:34 UTC · Jun 8, 2024Threat actor145
Salesloft: GitHub Account Breach Was Ground Zero in Drift CampaignInfosecurity Magazine·Sep 9, 10:00 UTC · Sep 9, 2025Threat actor145
FBI attributes largest crypto hack of 2024 to North Korea’s TraderTraitorThe Record·Dec 25, 18:36 UTC · Dec 25, 2024Threat actor45
New Tool Helps Devs Check For Manifest Confusion MismatchesInfosecurity Magazine·Jul 5, 10:00 UTC · Jul 5, 2023Threat actor45
MyPillow and Amerisleep are the latest victims of Magecart gangsSecurity Affairs·Mar 20, 18:23 UTC · Mar 20, 2019Threat actor45
Manifest Confusion Threat Undermines Trust in Entire Npm RegistryInfosecurity Magazine·Jun 29, 09:30 UTC · Jun 29, 2023Threat actor45
Lowe’s Market chain leaves client data up for grabsSecurity Affairs·Mar 19, 17:54 UTC · Mar 19, 2023Threat actor45
Fake AI Agent Skill Passed Security Scans and Reportedly Reached 26,000 AgentsThe Hacker News·Jun 23, 15:16 UTC · Jun 23, 2026Threat actor145
Report: The State of Secrets Sprawl 2025Help Net Security·Oct 30, 13:59 UTC · Oct 30, 2025Threat actor45
Kanvas: Open-source incident response case management toolHelp Net Security·Jul 9, 00:00 UTC · Jul 9, 2025Threat actor145
Attack Flow: Learn how cyber adversaries combine and sequence offensive techniquesHelp Net Security·Apr 16, 00:00 UTC · Apr 16, 2025Threat actor45
US and Japan Blame North Korea for $308m Crypto HeistInfosecurity Magazine·Dec 24, 12:15 UTC · Dec 24, 2024Threat actor45
Freejacking Campaign By PurpleUrchin Bypasses CaptchasInfosecurity Magazine·Jan 9, 18:00 UTC · Jan 9, 2023Threat actor45
AI Deception Emerges in Cyber Tests as Agents Target Real People and SystemsSecurity Affairs·Aug 5, 19:40 UTC · Aug 5, 2026Threat actor145
The Hunter's Paradox: Is it time to embrace automated threat hunting?Cisco Talos·Jul 16, 10:00 UTC · Jul 16, 2026Threat actor45
Hidden Web Prompts Trick AI Agents Into Sending MoneySecurity Affairs·Jul 6, 13:06 UTC · Jul 6, 2026Threat actor45
Iranian Cyber Response to Death of IRGC Head Would Likely Use Reported TTPs and Previous AccessRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026Threat actor45
‘BLOCKADE’: The Right Is Using AI Content Scanners to Try to Supercharge Book Banning404 Media·Apr 1, 13:00 UTC · Apr 1, 2026Threat actor145
Meta stopped covert operations from Iran, China, and Romania spreading propagandaSecurity Affairs·May 30, 20:02 UTC · May 30, 2025Threat actor145
Researchers unmasked the notorious threat actor USDoDSecurity Affairs·Aug 27, 11:37 UTC · Aug 27, 2024Threat actor145
Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS ToolThe Hacker News·Aug 7, 11:49 UTC · Aug 7, 2024Threat actor45
Cryptojacking Campaign Targets Misconfigured Kubernetes ClustersThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2024Threat actor45
Threat Actor Claims to Leak 270GB of New York Times DataInfosecurity Magazine·Jun 10, 10:30 UTC · Jun 10, 2024Threat actor45
Cloud Console Cartographer: Open-source tool helps security teams transcribe log activityHelp Net Security·Apr 22, 00:00 UTC · Apr 22, 2024Threat actor45