Search: “github”

4,798 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 335 Threat actor 310 Industry 192 Policy & legal 156 AI safety & security 141 Phishing & fraud 127 AI tools & infra 121 Tools 104 Research 57 Model release 41

SeverityAll critical 1460 high 1467 medium 1126 low 460 info 295

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

The Hacker NewsJul 27, 08:01 UTC · Jul 27, 2026Vulnerability1

42

PurpleBravo’s Targeting of the IT Software Supply Chain

Recorded FutureJul 22, 00:00 UTC · Jul 22, 2026Vulnerability

42

Cybercriminals abused GitHub, YouTube and VirusTotal to push crypto-stealing malware

Help Net SecurityJun 19, 00:00 UTC · Jun 19, 2026Malware

30

Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

The Hacker NewsMay 19, 09:12 UTC · May 19, 2026Data breach

57

⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & More

The Hacker NewsMay 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940 CVE-2026-31431 CVE-2026-3854+2 CVEs1

60

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

The Hacker NewsMay 1, 16:27 UTC · May 1, 2026Ransomware

57

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

The Hacker NewsApr 27, 14:19 UTC · Apr 27, 2026Ransomware

57

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Krebs on SecurityMar 23, 19:04 UTC · Mar 23, 2026Malware

42

Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets

The Hacker NewsMar 11, 12:57 UTC · Mar 11, 2026Data breach CVE-2026-28353

60

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

The Hacker NewsDec 12, 18:50 UTC · Dec 12, 2025Malware

30

Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware

Security AffairsNov 30, 01:02 UTC · Nov 30, 2025Malware

42

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

The Hacker NewsNov 25, 03:51 UTC · Nov 25, 2025Vulnerability

55

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

The Hacker NewsOct 14, 05:07 UTC · Oct 14, 2025Malware

42

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

The Hacker NewsSep 24, 16:23 UTC · Sep 24, 2025Malware

30

Supply Chain Worm Prowls npm to Steal Hundreds of Secrets

Infosecurity MagazineSep 17, 10:20 UTC · Sep 17, 2025Vulnerability

42

Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm Packages

The Hacker NewsAug 6, 10:50 UTC · Aug 6, 2025Malware

42

Big Tech’s Mixed Response to U.S. Treasury Sanctions

Krebs on SecurityJul 4, 14:30 UTC · Jul 4, 2025Policy & legal

30

Water Curse Employs 76 GitHub Accounts to Deliver Multi

The Hacker NewsJun 20, 07:08 UTC · Jun 20, 2025Vulnerability

42

GitHub is Leaking Trump’s Plans to 'Accelerate' AI Across Government

404 MediaJun 10, 13:47 UTC · Jun 10, 2025AI tools & infra1

30

Fake GitHub projects distribute stealers in GitVenom campaign

Kaspersky SecurelistFeb 25, 06:21 UTC · Feb 25, 2025Malware

42

‘Forbidden Words’: Github Reveals How Software Engineers Are Purging Federal Databases

404 MediaFeb 3, 20:07 UTC · Feb 3, 2025Policy & legal

55

Multiple Git flaws led to credentials compromise

Security AffairsJan 27, 14:36 UTC · Jan 27, 2025Vulnerability CVE-2025-23040 CVE-2024-53263 CVE-2024-52006+1 CVEs

60

Researchers expose GitHub Actions workflows as risky and exploitable

Help Net SecurityOct 23, 09:58 UTC · Oct 23, 2024Industry1

30

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2024Vulnerability CVE-2024-9487 CVE-2024-4985 CVE-2024-9539+1 CVEs

60

GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

The Hacker NewsAug 22, 04:48 UTC · Aug 22, 2024Vulnerability CVE-2024-6800 CVE-2024-7711 CVE-2024-6337+1 CVEs1

60

New York Times source code compromised via exposed GitHub token

Security AffairsJun 8, 20:34 UTC · Jun 8, 2024Threat actor1

45

GitCaught campaign relies on Github and Filezilla to deliver multiple malware

Security AffairsMay 20, 14:20 UTC · May 20, 2024Malware

30

New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

The Hacker NewsApr 25, 03:49 UTC · Apr 25, 2024Malware CVE-2024-214131

47

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2024Malware

42

Crooks manipulate GitHub's search results to distribute malware

Security AffairsApr 13, 20:36 UTC · Apr 13, 2024Malware

30

GitHub push protection now on by default for public repositories

Help Net SecurityMar 4, 00:00 UTC · Mar 4, 2024Data breach1

57

Malicious npm Packages Used to Target GitHub Developer SSH Keys

Infosecurity MagazineJan 23, 17:00 UTC · Jan 23, 2024Malware1

42

Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack

The Hacker NewsSep 12, 11:32 UTC · Sep 12, 2023Vulnerability

55

Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

The Hacker NewsJun 23, 06:22 UTC · Jun 23, 2023Vulnerability

42

GitHub introduces private vulnerability reporting for open source repositories

Help Net SecurityApr 27, 00:00 UTC · Apr 27, 2023Vulnerability

30

Massive GitHub analysis reveals 10 million secrets hidden in 1 billion commits

Help Net SecurityMar 9, 00:00 UTC · Mar 9, 2023Data breach1

60

GitHub disables pro

CyberScoopJan 12, 16:00 UTC · Jan 12, 2023Exploit / PoC in the wild

60

Google open-sources Allstar, a tool to protect GitHub repos

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability

30

Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver

The Hacker NewsDec 9, 17:02 UTC · Dec 9, 2022Malware CVE-2021-44228 CVE-2021-45046

47

Cobalt Mirage Affiliate Uses GitHub to Relay Drokbk Malware Instructions

Infosecurity MagazineDec 9, 16:00 UTC · Dec 9, 2022Malware

30