SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain AttackThe Hacker News·Apr 7, 06:38 UTC · Apr 7, 2025Vulnerability42
Taking over millions of developers exploiting an Open VSX Registry flawSecurity Affairs·Jun 27, 19:37 UTC · Jun 27, 2025Vulnerability55
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160
Coinbase Initially Targeted in GitHub Actions Supply Chain Attack; 218 Repositories' CI/CD Secrets ExposedThe Hacker News·Mar 24, 05:52 UTC · Mar 24, 2025VulnerabilityCVE-2025-30066CVE-2025-3015447
Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain AttacksThe Hacker News·Jun 27, 05:04 UTC · Jun 27, 2025Vulnerability55
GitHub restores code following malicious changes to tjThe Record·Mar 17, 20:37 UTC · Mar 17, 2025VulnerabilityCVE-2025-3006635
PurpleUrchin Bypasses CAPTCHA and Steals Cloud Platform ResourcesPalo Alto Unit 42·Jun 5, 16:59 UTC · Jun 5, 2024Vulnerability30
James Mickens on the Current State of Computer SecuritySchneier on Security·Jan 27, 14:35 UTC · Jan 27, 2020Vulnerability55
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New StoriesThe Hacker News·Jun 12, 05:36 UTC · Jun 12, 2026Vulnerability142
GitHub Action tj-actions/changed-files was compromised in supply chain attackSecurity Affairs·Mar 18, 10:17 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066147
DORA Takes Effect: Financial Firms Navigating Compliance HeadwindsInfosecurity Magazine·Jan 17, 09:35 UTC · Jan 17, 2025Vulnerability55
DHS asked to consider potentially 'devastating’ impact of hacks on rural water systemsThe Record·Apr 25, 13:59 UTC · Apr 25, 2024Vulnerability30
TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning AttacksThe Hacker News·Jan 19, 02:51 UTC · Jan 19, 2024Vulnerability42
Exclusive: Inside Ukraine’s secret drone factoriesThe Record·Oct 19, 00:00 UTC · Oct 19, 2023Vulnerability30
GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot ContributionsThe Hacker News·Sep 29, 02:43 UTC · Sep 29, 2023Vulnerability142
ZNet Technologies collaborates with Acronis to empower service providers in USA and CanadaHelp Net Security·Mar 3, 00:00 UTC · Mar 3, 2022Vulnerability55
Friday Squid Blogging: Eat Less SquidSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
The Effectiveness of Publicly Shaming Bad SecurityTroy Hunt·Sep 11, 08:51 UTC · Sep 11, 2018Vulnerability30
Can bug bounty programs solve the cybersecurity workforce shortage?CyberScoop·Sep 20, 17:38 UTC · Sep 20, 2016Vulnerability55