Tag: GitHub
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
CISA publishes forensic report on May credential leak from contractor GitHub account
CISA publishes forensic analysis of May 2026 credential leak from contractor GitHub account
CISA contractor accidentally leaks AWS credentials on personal GitHub account
A CISA contractor accidentally exposed AWS access keys and admin credentials on a personal GitHub account, sparking a major security…
How hackers weaponized dormant GitHub profiles for corporate infiltration
Attackers are using networks of dormant GitHub accounts to map corporate development teams and steal source code.
Pyongyang Developers Weaponize VS Code Extensions for Cryptocurrency Heists
A North Korean threat group is targeting developers with phishing emails that lead to malicious VS Code projects, deploying cross…
Critical GitHub.com and Enterprise Server RCE Vulnerability Enables Full Server Compromise
CVE-2026-3854 allowed any authenticated user to compromise GitHub backend servers via injected git push options, exposing millions of private repositories.…