Search: “github”

4,427 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 335 Threat actor 310 Industry 192 Policy & legal 156 Phishing & fraud 127 Tools 104 Research 57 Advisory 34

SeverityAll critical 1460 high 1466 medium 1000 low 460 info 49

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top

The Hacker NewsMar 26, 03:55 UTC · Mar 26, 2024Malware1

42

Stolen OAuth tokens used to download data from dozens of orgs, GitHub warns

Security AffairsApr 17, 14:58 UTC · Apr 17, 2022Threat actor

45

Checkmarx provides automated security scans within GitHub repositories

Help Net SecurityOct 5, 00:00 UTC · Oct 5, 2020Vulnerability

30

GitHub rolls out new token scanning, security alert features

CyberScoopOct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild

60

GitHub started warning users when adopting compromised credentials

Security AffairsAug 8, 16:04 UTC · Aug 8, 2018Data breach

57

Code hosting service GitHub can now scan also for vulnerable Python code

Security AffairsJul 16, 13:40 UTC · Jul 16, 2018Vulnerability1

30

Github Account of Gentoo Linux Hacked, Code Replaced With Malware

The Hacker NewsJul 4, 14:08 UTC · Jul 4, 2018Malware

30

GitHub said leaked passwords were used to access its accounts

Security AffairsMay 2, 07:00 UTC · May 2, 2018Data breach

57

GitHub warns developers when their projects include vulnerable libraries

Security AffairsNov 17, 18:53 UTC · Nov 17, 2017Vulnerability

30

Microsoft is Shutting Down CodePlex, Asks Devs To Move To GitHub

The Hacker NewsApr 3, 10:12 UTC · Apr 3, 2017Industry1

30

GitHub Dependabot malware alerts now cover eight ecosystems

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2026Malware

30

Miasma Worm Compromises 73 Microsoft GitHub Repositories

Security AffairsJun 9, 16:08 UTC · Jun 9, 2026Malware1

42

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

The Hacker NewsMay 1, 09:43 UTC · May 1, 2026Data breach

57

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

The Hacker NewsApr 26, 07:45 UTC · Apr 26, 2026Threat actor

57

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor1

57

Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads

Infosecurity MagazineJul 17, 16:00 UTC · Jul 17, 2025Malware

30

GitHub project maintainers targeted with fake security alert

Help Net SecurityApr 2, 08:49 UTC · Apr 2, 2025Threat actor1

45

GitHub Action tj-actions/changed-files was compromised in supply chain attack

Security AffairsMar 18, 10:17 UTC · Mar 18, 2025Vulnerability CVE-2025-300661

47

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

The Hacker NewsMar 18, 04:03 UTC · Mar 18, 2025Vulnerability CVE-2025-30066 CVE-2023-492911

60

Google Cloud Platform Data Destruction via Cloud Build

Cisco TalosFeb 6, 11:00 UTC · Feb 6, 2025Vulnerability1

42

GitHub Secure Open Source Fund: Project maintainers, apply now!

Help Net SecurityNov 20, 00:00 UTC · Nov 20, 2024Vulnerability1

30

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

The Hacker NewsAug 17, 06:28 UTC · Aug 17, 2024Vulnerability

42

There is no real fix to the security issues recently found in GitHub and other similar software

Cisco TalosAug 1, 18:00 UTC · Aug 1, 2024Ransomware CVE-2018-0824

60

Network of ghost GitHub accounts successfully distributes malware

Help Net SecurityJul 24, 00:00 UTC · Jul 24, 2024Malware

30

JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

Security AffairsJun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-370511

60

GitHub Rotates Credentials and Patches New Bug

Infosecurity MagazineJan 17, 09:30 UTC · Jan 17, 2024Vulnerability1

55

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

The Hacker NewsJan 12, 04:20 UTC · Jan 12, 2024Threat actor

45

WhiteSource now supports GitHub Packages

Help Net SecurityDec 14, 12:02 UTC · Dec 14, 2023Vulnerability

30

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The Hacker NewsJan 18, 05:17 UTC · Jan 18, 2023Malware1

42

Salesforce-owned Heroku faces backlash over handling of stolen user credentials

The RecordJan 12, 00:00 UTC · Jan 12, 2023Threat actor

45

By end of 2023, GitHub to force code contributors to use two

The RecordJan 12, 00:00 UTC · Jan 12, 2023Malware1

42

GitHub Bug Exposed Repositories to Hijacking

Infosecurity MagazineOct 27, 10:00 UTC · Oct 27, 2022Vulnerability

42

Contrast Security partners with GitHub to deliver pipeline-native security to developers

Help Net SecurityFeb 3, 00:00 UTC · Feb 3, 2022Vulnerability

30

Attackers are abusing GitHub infrastructure to mine cryptocurrency

Security AffairsApr 3, 10:04 UTC · Apr 3, 2021Threat actor

45

GitHub introduces new tools and security features to secure code

Security AffairsMay 25, 06:13 UTC · May 25, 2019Vulnerability1

30