GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Proactive Defense: Hardening Code Pipelines and CI/CD Infrastructure
in the wild 15 min
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Hundreds of Leaked GitHub App Keys Still Authenticate
2 sources 2 min
GitHub Actions leaking secrets when Miri output is cached
4 min
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign
Extortion crews have their eyes on high-value AI data, Google warns
Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed
Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection
3 min1
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
1