Search: “github”

1,461 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 334 Threat actor 307 Industry 190 Policy & legal 156 AI safety & security 140 Phishing & fraud 127 AI tools & infra 121 Tools 104 Research 55 Model release 40

SeverityAll critical 1460 high 1464 medium 1124 low 459 info 290

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor1

57

GitHub Action tj-actions/changed-files was compromised in supply chain attack

Security AffairsMar 18, 10:17 UTC · Mar 18, 2025Vulnerability CVE-2025-300661

47

Google Cloud Platform Data Destruction via Cloud Build

Cisco TalosFeb 6, 11:00 UTC · Feb 6, 2025Vulnerability1

42

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

The Hacker NewsAug 17, 06:28 UTC · Aug 17, 2024Vulnerability

42

There is no real fix to the security issues recently found in GitHub and other similar software

Cisco TalosAug 1, 18:00 UTC · Aug 1, 2024Ransomware CVE-2018-0824

60

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The Hacker NewsJan 18, 05:17 UTC · Jan 18, 2023Malware1

42

By end of 2023, GitHub to force code contributors to use two

The RecordJan 12, 00:00 UTC · Jan 12, 2023Malware1

42

GitHub Bug Exposed Repositories to Hijacking

Infosecurity MagazineOct 27, 10:00 UTC · Oct 27, 2022Vulnerability

42

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

The Hacker NewsJun 9, 05:50 UTC · Jun 9, 2026Vulnerability1

42

Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories

The Hacker NewsJun 4, 15:24 UTC · Jun 4, 2026Vulnerability1

42

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-33634

60

Massive GitHub malware operation spreads BoryptGrab stealer

Security AffairsMar 8, 13:38 UTC · Mar 8, 2026Malware

42

Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack

Help Net SecuritySep 16, 00:00 UTC · Sep 16, 2025Data breach

57

GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects

Security AffairsFeb 26, 06:27 UTC · Feb 26, 2025Threat actor1

57

Millions Face RepoJacking Risk on GitHub Repositories

Infosecurity MagazineJun 26, 17:00 UTC · Jun 26, 2023Vulnerability

42

Okta revealed that its private GitHub repositories were hacked

Security AffairsDec 21, 19:32 UTC · Dec 21, 2022Ransomware

57

Cloud-Based Cryptocurrency mining attacks abuse GitHub Actions and Azure VM

Security AffairsJul 12, 07:26 UTC · Jul 12, 2022Vulnerability

42

Ubuntu-Maker Canonical’s GitHub Account Gets Hacked

The Hacker NewsJul 7, 15:58 UTC · Jul 7, 2019Malware

42

The Winnti Gang continues its activity and leverages GitHub for C&C Communications

Security AffairsMay 7, 12:32 UTC · May 7, 2018Malware

42

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

The Hacker NewsApr 29, 08:29 UTC · Apr 29, 2026Malware

42

Checkmarx supply chain attack impacts Bitwarden npm distribution path

Security AffairsApr 25, 21:59 UTC · Apr 25, 2026Data breach

57

Handling people's personal data is sensitive business

Troy HuntNov 22, 10:50 UTC · Nov 22, 2016Data breach

57

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

The Hacker NewsJun 23, 14:22 UTC · Jun 23, 2026Vulnerability

42

Packagist Supply Chain Attack Infects 8 Packages Using GitHub

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Vulnerability

42

Grafana GitHub Breach Exposes Source Code via TanStack npm Attack

The Hacker NewsMay 20, 05:13 UTC · May 20, 2026Ransomware1

57

Legitify: Open-source scanner for security misconfigurations on GitHub and GitLab

Help Net SecurityApr 15, 00:00 UTC · Apr 15, 2026Vulnerability1

42

Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

The Hacker NewsJul 21, 06:30 UTC · Jul 21, 2025Malware

42

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

The Hacker NewsMar 19, 06:31 UTC · Mar 19, 2025Advisory in the wildCVE-2025-30066

60

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

The Hacker NewsDec 17, 04:40 UTC · Dec 17, 2024Exploit / PoC

57

Phishing Tool GoIssue Targets Developers on GitHub

Infosecurity MagazineNov 12, 15:15 UTC · Nov 12, 2024Phishing & fraud1

42

North Korean hackers targeted tech companies through JumpCloud and GitHub

Help Net SecurityJul 25, 10:40 UTC · Jul 25, 2023Malware

42

More than a million GitHub repositories potentially vulnerable to RepoJacking

Security AffairsJun 23, 06:59 UTC · Jun 23, 2023Vulnerability

42

Octopus Scanner Malware: open source supply chain attack via NetBeans projects on GitHub

Security AffairsMay 29, 12:22 UTC · May 29, 2020Malware

42

Vulnerability reports are arriving faster than GitHub can review them

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wild

57

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware

42

Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential

The Hacker NewsJun 2, 08:55 UTC · Jun 2, 2026Vulnerability

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Malicious Commands in GitHub Codespaces Enable RCE

Infosecurity MagazineFeb 5, 14:30 UTC · Feb 5, 2026Vulnerability1

42

Ongoing malvertising campaign targets European IT workers with fake GitHub Desktop installers

Help Net SecuritySep 9, 00:00 UTC · Sep 9, 2025Threat actor

57