GitHub Action supply chain attack exposed secrets in 218 repos
The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...
GitHub supply chain attack spills secrets from 23,000 projects
StepSecurity disclosed a compromise of the popular GitHub Action tj-actions/changed-files, which works to detect file changes ...
InfoWorld8d
GitHub suffers a cascading supply chain attack compromising CI/CD secrets
CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.
Cryptopolitan on MSN4d
Coinbase fends off targeted GitHub Action attack in early-stage breach attempt
According to the cybersecurity firms analyzing the incident, the attacker initially tried to compromise the Coinbase ...
GitHub Action hack likely led to another in cascading supply chain attack
A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed ...
Coinbase targeted after recent Github attacks
The endgame of the recent cascading supply chain attack on GitHub was to breach Coinbase, one of the world’s most popular ...
GovInfoSecurity11d
Supply Chain Attack Targets GitHub Repositories and Secrets
Attackers subverted a widely used tool for software development environment GitHub, potentially allowing them to steal ...
As nation-state hacking becomes 'more in your face,' are supply chains secure?
"Nation-state hacking has become more in your face," says Cleveland – who now works for network intel infosec outfit ExtraHop ...
Security Boulevard1d
CodeQLEAKED – Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL
A potential supply chain attack on GitHub CodeQL started simply: a publicly exposed secret, valid for 1.022 seconds at a time. In that second, an attacker could take a series of steps that would allow ...
Large enterprises scramble after supply-chain attack spills their secrets
Open source software used by more than 23,000 organizations, some of them in large enterprises, was compromised with ...
The Hacker News3d
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More
Stay informed with the latest in cybersecurity trends, vulnerabilities, and best practices. Don't miss out on this week's critical updates on patching ...
Coinbase originally targeted during GitHub Action supply chain attack
Researchers from Palo Alto Networks said the hackers likely planned to leverage an open source project of the company for ...