A recently discovered vulnerability in GitHub Actions artifacts, known as ArtiPACKED, has the potential to compromise repositories and gain unauthorized access to organizations' cloud...
A threat actor known as Stargazer Goblin has established a network of fake GitHub accounts to run a Distribution-as-a-Service (DaaS) that spreads various types...
Cybersecurity researchers have found an accidentally leaked GitHub token that could have given unauthorized access to GitHub repositories of Python, Python Package Index (PyPI),...
A new sophisticated cyber threat group named CloudSorcerer has been detected targeting Russian government entities. They are using cloud services for command-and-control (C2) operations...
The cybersecurity threat actor APT28 believed to be supported by the Russian GRU has been identified as the culprit behind several cyber campaigns targeting...
Cloudflare has revealed that it disrupted a phishing campaign orchestrated by a group named FlyingYeti targeting Ukraine. The campaign aimed to exploit anxiety over...
GitHub has addressed a critical vulnerability in the GitHub Enterprise Server (GHES) that had the potential to allow attackers to bypass authentication protections.
Known as...