Search: “GitHub”

1,464 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 335 Threat actor 311 Industry 192 Policy & legal 156 AI safety & security 141 Phishing & fraud 127 AI tools & infra 122 Tools 104 Research 57 Model release 44

SeverityAll critical 1460 high 1468 medium 1126 low 460 info 302

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor1

57

GitHub Action tj-actions/changed-files was compromised in supply chain attack

Security AffairsMar 18, 10:17 UTC · Mar 18, 2025Vulnerability CVE-2025-300661

47

Google Cloud Platform Data Destruction via Cloud Build

Cisco TalosFeb 6, 11:00 UTC · Feb 6, 2025Vulnerability1

42

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

The Hacker NewsAug 17, 06:28 UTC · Aug 17, 2024Vulnerability

42

There is no real fix to the security issues recently found in GitHub and other similar software

Cisco TalosAug 1, 18:00 UTC · Aug 1, 2024Ransomware CVE-2018-08241

60

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The Hacker NewsJan 18, 05:17 UTC · Jan 18, 2023Malware1

42

By end of 2023, GitHub to force code contributors to use two

The RecordJan 12, 00:00 UTC · Jan 12, 2023Malware1

42

GitHub Bug Exposed Repositories to Hijacking

Infosecurity MagazineOct 27, 10:00 UTC · Oct 27, 2022Vulnerability

42

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

The Hacker NewsJun 9, 05:50 UTC · Jun 9, 2026Vulnerability1

42

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

The Hacker NewsJun 4, 15:24 UTC · Jun 4, 2026Vulnerability1

42

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-336341

60

Massive GitHub malware operation spreads BoryptGrab stealer

Security AffairsMar 8, 13:38 UTC · Mar 8, 2026Malware

42

Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack

Help Net SecuritySep 16, 00:00 UTC · Sep 16, 2025Data breach

57

GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects

Security AffairsFeb 26, 06:27 UTC · Feb 26, 2025Threat actor1

57

Millions Face RepoJacking Risk on GitHub Repositories

Infosecurity MagazineJun 26, 17:00 UTC · Jun 26, 2023Vulnerability

42

Okta revealed that its private GitHub repositories were hacked

Security AffairsDec 21, 19:32 UTC · Dec 21, 2022Ransomware

57

Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VM

Security AffairsJul 12, 07:26 UTC · Jul 12, 2022Vulnerability

42

Ubuntu-Maker Canonical’s GitHub Account Gets Hacked

The Hacker NewsJul 7, 15:58 UTC · Jul 7, 2019Malware

42

The Winnti Gang continues its activity and leverages GitHub for C&C Communications

Security AffairsMay 7, 12:32 UTC · May 7, 2018Malware

42

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

The Hacker NewsApr 29, 08:29 UTC · Apr 29, 2026Malware

42

Checkmarx supply chain attack impacts Bitwarden npm distribution path

Security AffairsApr 25, 21:59 UTC · Apr 25, 2026Data breach

57

Handling people's personal data is sensitive business

Troy HuntNov 22, 10:50 UTC · Nov 22, 2016Data breach

57

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

The Hacker NewsJun 23, 14:22 UTC · Jun 23, 2026Vulnerability

42

Packagist Supply Chain Attack Infects 8 Packages Using GitHub

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Vulnerability

42

Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

The Hacker NewsMay 20, 05:13 UTC · May 20, 2026Ransomware1

57

Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2026Vulnerability1

42

Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

The Hacker NewsJul 21, 06:30 UTC · Jul 21, 2025Malware

42

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

The Hacker NewsMar 19, 06:31 UTC · Mar 19, 2025Advisory in the wildCVE-2025-30066

60

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

The Hacker NewsDec 17, 04:40 UTC · Dec 17, 2024Exploit / PoC

57

Phishing Tool GoIssue Targets Developers on GitHub

Infosecurity MagazineNov 12, 15:15 UTC · Nov 12, 2024Phishing & fraud1

42

North Korean hackers targeted tech companies through JumpCloud and GitHub

Help Net SecurityJul 25, 10:40 UTC · Jul 25, 2023Malware

42

More than a million GitHub repositories potentially vulnerable to RepoJacking

Security AffairsJun 23, 06:59 UTC · Jun 23, 2023Vulnerability

42

Octopus Scanner Malware: open source supply chain attack via NetBeans projects on GitHub

Security AffairsMay 29, 12:22 UTC · May 29, 2020Malware

42

Vulnerability reports are arriving faster than GitHub can review them

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wild

57

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware1

42

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Vulnerability

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Malicious Commands in GitHub Codespaces Enable RCE

Infosecurity MagazineFeb 5, 14:30 UTC · Feb 5, 2026Vulnerability1

42