A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed ...

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.

CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking ...

According to the cybersecurity firms analyzing the incident, the attacker initially tried to compromise the Coinbase ...

Stay informed with the latest in cybersecurity trends, vulnerabilities, and best practices. Don't miss out on this week's ...

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

In a new phishing campaign, GitHub developers are being targeted with fake “Security Alerts” where they are prompted to ...

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

A supply chain attack on a GitHub Actions tool has put up to 23,000 organisations at risk of having credentials stolen.

New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub.

Six malicious packages have been identified on npm (Node package manager) linked to the notorious North Korean hacking group ...

While they didn’t share the rundown of how to get this delightful hack working, some helpful commenters have revealed it’s most likely been made possibly by way of Github and some sideloading.