Browsing Tag
GitHub
39 posts
GitHub Reports Code-Signing Certificate Theft in Security Breach
GitHub states that hackers gained access to its code repositories and stole code-signing certificates for two of its desktop apps: Desktop and Atom.
GitHub Disables Pages of Pro-Russia DDoS Group NoName057(16)
NoName057(16) is a group that has been targeting NATO and Czech presidential election candidates' websites recently.
GitHub Attack Allowed Attackers to Steal Okta’s Source Code
Okta has, however, confirmed that attackers couldn’t access its customer data or services. Authentication giant Okta has suffered…
GitHub Abused to Distribute Malicious Packages on PyPI in Image Files
Threat actors are using steganography to hide malicious code in images.
GitHub fixes critical vulnerability that exposed repositories to attackers
The vulnerability allowed attackers to take control of GitHub repositories and infect codes and apps with malware.
US Blacklists Tornado Cash, GitHub Removes Co-Founder in Response
The US Treasury Department has blacklisted Tornado Cash on the accusation that the platform helped bad actors harvest…
Thousands of GitHub Repositories Cloned in Supply Chain Attack
This hasn’t been a great week for the crypto community. On Monday, the Nomad bridge got exploited and…
Hackers can spoof commit metadata to create false GitHub repositories
Checkmarx security researchers have warned about an emerging new supply chain attack tactic involving spoofed metadata commits to present malicious…
GitHub: Hackers Stole OAuth Access Tokens to Target Dozens of Firms
GitHub has revealed that attackers have abused OAuth user tokens issued to Heroku and Travis-CI, popular third-party OAuth…
CISA warns of trojanized versions of JavaScript library’s NPM package
The warning comes days after three rogue packages, okhsa, klow, and klown discovered by DevSecOps firm Sonatype, were removed from the NPM repository.