Search: “github”

4,778 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 544 Ransomware 426 Data breach 334 Threat actor 307 Industry 190 Policy & legal 156 AI safety & security 140 Phishing & fraud 127 AI tools & infra 121 Tools 103 Research 55 Model release 39

SeverityAll critical 1460 high 1463 medium 1124 low 459 info 288

The Trojan horse of cybercrime: Weaponizing SaaS notification pipelines

Cisco TalosApr 7, 10:00 UTC · Apr 7, 2026Malware

55

Finding Lost Data with Threat Intelligence: Mitigating Data Leaks

Recorded FutureJan 12, 00:00 UTC · Jan 12, 2026Vulnerability

30

GitHub abused to distribute payloads on behalf of malware-as-a

Ars Technica · SecurityJul 17, 22:16 UTC · Jul 17, 2025Malware

42

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top

The Hacker NewsMar 26, 03:55 UTC · Mar 26, 2024Malware1

42

Stolen OAuth tokens used to download data from dozens of orgs, GitHub warns

Security AffairsApr 17, 14:58 UTC · Apr 17, 2022Threat actor

45

Building Password Purgatory with Cloudflare Pages and Workers

Troy HuntMar 11, 02:00 UTC · Mar 11, 2022AI tools & infra1

30

Checkmarx provides automated security scans within GitHub repositories

Help Net SecurityOct 5, 00:00 UTC · Oct 5, 2020Vulnerability

30

GitHub rolls out new token scanning, security alert features

CyberScoopOct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild

60

GitHub started warning users when adopting compromised credentials

Security AffairsAug 8, 16:04 UTC · Aug 8, 2018Data breach

57

Code hosting service GitHub can now scan also for vulnerable Python code

Security AffairsJul 16, 13:40 UTC · Jul 16, 2018Vulnerability1

30

Github Account of Gentoo Linux Hacked, Code Replaced With Malware

The Hacker NewsJul 4, 14:08 UTC · Jul 4, 2018Malware

30

GitHub said leaked passwords were used to access its accounts

Security AffairsMay 2, 07:00 UTC · May 2, 2018Data breach

57

GitHub warns developers when their projects include vulnerable libraries

Security AffairsNov 17, 18:53 UTC · Nov 17, 2017Vulnerability

30

Microsoft is Shutting Down CodePlex, Asks Devs To Move To GitHub

The Hacker NewsApr 3, 10:12 UTC · Apr 3, 2017Industry1

30

GitHub Dependabot malware alerts now cover eight ecosystems

Help Net SecurityAug 10, 00:00 UTC · Aug 10, 2026Malware

30

Miasma Worm Compromises 73 Microsoft GitHub Repositories

Security AffairsJun 9, 16:08 UTC · Jun 9, 2026Malware1

42

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026AI safety & security CVE-2026-45321

35

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

The Hacker NewsMay 1, 09:43 UTC · May 1, 2026Data breach

57

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

The Hacker NewsApr 26, 07:45 UTC · Apr 26, 2026Threat actor

57

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

Flying Under the Radar: Abusing GitHub for Malicious Infrastructure

Recorded FutureAug 22, 00:00 UTC · Aug 22, 2025Threat actor1

57

Malware-as-a-Service Campaign Exploits GitHub to Deliver Payloads

Infosecurity MagazineJul 17, 16:00 UTC · Jul 17, 2025Malware

30

GitHub project maintainers targeted with fake security alert

Help Net SecurityApr 2, 08:49 UTC · Apr 2, 2025Threat actor1

45

GitHub Action tj-actions/changed-files was compromised in supply chain attack

Security AffairsMar 18, 10:17 UTC · Mar 18, 2025Vulnerability CVE-2025-300661

47

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

The Hacker NewsMar 18, 04:03 UTC · Mar 18, 2025Vulnerability CVE-2025-30066 CVE-2023-492911

60

Google Cloud Platform Data Destruction via Cloud Build

Cisco TalosFeb 6, 11:00 UTC · Feb 6, 2025Vulnerability1

42

GitHub Secure Open Source Fund: Project maintainers, apply now!

Help Net SecurityNov 20, 00:00 UTC · Nov 20, 2024Vulnerability1

30

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The Hacker NewsSep 9, 12:05 UTC · Sep 9, 2024Malware1

42

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

The Hacker NewsAug 17, 06:28 UTC · Aug 17, 2024Vulnerability

42

There is no real fix to the security issues recently found in GitHub and other similar software

Cisco TalosAug 1, 18:00 UTC · Aug 1, 2024Ransomware CVE-2018-0824

60

Network of ghost GitHub accounts successfully distributes malware

Help Net SecurityJul 24, 00:00 UTC · Jul 24, 2024Malware

30

JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

Security AffairsJun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-370511

60

GitHub Rotates Credentials and Patches New Bug

Infosecurity MagazineJan 17, 09:30 UTC · Jan 17, 2024Vulnerability1

55

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

The Hacker NewsJan 12, 04:20 UTC · Jan 12, 2024Threat actor

45

WhiteSource now supports GitHub Packages

Help Net SecurityDec 14, 12:02 UTC · Dec 14, 2023Vulnerability

30

Hackers Can Abuse Legitimate GitHub Codespaces Feature to Deliver Malware

The Hacker NewsJan 18, 05:17 UTC · Jan 18, 2023Malware1

42

Salesforce-owned Heroku faces backlash over handling of stolen user credentials

The RecordJan 12, 00:00 UTC · Jan 12, 2023Threat actor

45