Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack ...

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

The US Cybersecurity and Infrastructure Security Agency added flaws in Fortinet and a popular GitHub Action to its Known Exploited Vulnerabilities catalog ...

A compromise of the popular GitHub Actions tool turned into a massive supply chain attack, at this point thought to be ...

CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.

Ad giant just confirmed its cloudy arm will embrace security shop in $30B deal Infoseccers at Google acquisition target Wiz ...

GitHub Action tj-actions/changed-files was compromised, leaking CI/CD secrets. Users must update immediately to prevent ...

Use precise geolocation data and actively scan device characteristics for identification. This is done to store and access ...

In a new phishing campaign, GitHub developers are being targeted with fake “Security Alerts” where they are prompted to ...