Similar to This
Previous
Worm armed 42 GitHub repos by hiding a payload too big to fail: Payload blobs measuring 12.9 to 13.7 MB were large enough to evade GitHub code search
theregister.com/security/2026/10/26/worm-armed-42-github-repos-by-hiding-a-payload-too-big-to-fail/5305570

The bridge to agent-scale Git infrastructure: We moved a copy of 99.99999% of GitHub's repositories to Azure. Here's how per-reference quorums will ...
github.blog/engineering/architecture-optimization/the-bridge-to-agent-scale-git-infrastructure/

India becomes the latest country to report rogue AI agent activity: The agents got in through credentials and connection settings left exposed in app ...
techcrunch.com/2026/10/16/india-becomes-the-latest-country-to-report-rogue-ai-agent-activity/

Nintendo Just Delivered Devastating News to Emulator Users: Nintendo just took down over 400 GitHub repositories for Nintendo Switch emulators after issuing a ...
polygon.com/nintendo-emulation-take-downs-piracy/

Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.: GhostAction hijacked about 1,900 GitHub accounts to plant credential-stealing Actions ...
thenewstack.io/hackers-hijacked-1900-github-accounts-then-they-went-after-30000-repos/

Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub: Audit logs found no unexpected visitors, but release verification still needs an ...
theregister.com/security/2026/08/11/mozilla-revokes-firefox-signing-key-after-unencrypted-copy-lands-in-github/5285908

Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/

Lessons Learned from CISA’s Recent GitHub Leak: The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a ...
krebsonsecurity.com/2026/07/lessons-learned-from-cisas-recent-github-leak/

GitHub AI agent leaks private repos when asked nicely: Per usual, there's no fix - or even any documentation - for GitLost
theregister.com/security/2026/07/07/github-ai-agent-leaks-private-repos-when-asked-nicely/5267924

If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk: The Miasma worm supply chain attack on Microsoft-owned GitHub repositories targets ...
scienspire.com/article/microsoft-breach-ai-code-assistants

Microsoft Hacked to Deliver Malware to Claude and Gemini Users: Microsoft took the highly unusual step of shutting down more than 70 of its own GitHub ...
404media.co/microsoft-hacked-to-deliver-malware-to-claude-and-gemini-users/

Hackers breach GitHub and access 3,800 internal repositories now listed for sale: GitHub has said it found about 3,800 internal repositories accessed in the ...
techspot.com/news/112498-hackers-breach-github-malicious-vs-code-extension-access.html

CISA Admin Leaked AWS GovCloud Keys on Github: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a ...
krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/

Exclusive: Senator requests classified briefing on CISA credentials leak: Researchers uncovered an exposed GitHub repository that included internal credentials ...
axios.com/2026/05/19/congress-cisa-briefing-credentials-leak

US cyber agency CISA exposed reams of passwords and cloud keys to the open web: The federal cybersecurity agency left plaintext passwords in a spreadsheet ...
techcrunch.com/2026/05/19/us-cyber-agency-cisa-exposed-reams-of-passwords-and-cloud-keys-to-the-open-web/

Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/

Next
