Oversharing is not caring: What’s at stake if your employees post too much online
Social Media From LinkedIn to X, GitHub to Instagram, there are plenty of opportunities to share work-related information. But posting...
GitHub
CamoLeak: GitHub Copilot Flaw Allowed Silent Data Theft
Image: przemekklos/Envato A critical vulnerability in GitHub Copilot Chat (CVSS 9.6) allowed attackers to siphon secrets and source code from...
Astaroth Trojan abuses GitHub to host configs and evade takedowns
Astaroth Trojan abuses GitHub to host configs and evade takedowns Pierluigi Paganini October 13, 2025 The Astaroth banking Trojan uses...
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories
Cybercrime group claims to have breached Red Hat ‘s private GitHub repositories Pierluigi Paganini October 02, 2025 The cybercrime group...
Smashing Security podcast #436: The €600,000 gold heist, powered by ransomware
Ransomware doesn’t just freeze computers – it can silence alarms too. And when the Natural History Museum in Paris went...
Beware: GitHub repos distributing Atomic Infostealer on macOS
Beware: GitHub repos distributing Atomic Infostealer on macOS Pierluigi Paganini September 22, 2025 LastPass warns macOS users of fake GitHub...
Self-Replicating Worm Hits 180+ Software Packages
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that...
Hackers breached Salesloft ’s GitHub in March, and used stole tokens in a mass attack
Hackers breached Salesloft ’s GitHub in March, and used stole tokens in a mass attack Pierluigi Paganini September 08, 2025...
xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs
An employee at Elon Musk’s artificial intelligence company xAI leaked a private key on GitHub that for the past two months...
Development of a Extensive Document File Viewer through Creative Programming in Visual Studio Code, Cline, OpenRouter, and Claude 3.7
A fresh Windows 10/11 software utilizing AI has been successfully developed. This project is a sequel to the SquareCap application...
DOGE Worker’s Ethical Guidelines Backs NLRB Informant
An informer at the National Labor Relations Board (NLRB) claimed recently that inhabitants of Elon Musk’s Office of Government Efficiency...
Informant: DOGE Drained NLRB Case Data
An expert in security working at the National Labor Relations Board (NLRB) is asserting that personnel from the Department of...
A Supply Chain Assault on Coinbase with GitHub Actions; Leaked CI/CD Secrets from 218 Repositories
The GitHub Action "tj-actions/changed-files" was at the center of the supply chain breach, commencing as a precise strike against one...
Security Breach in GitHub Action Exposes CI/CD Credentials in More Than 23,000 Repositories
Security experts have highlighted an event where the widely used GitHub Action tj-actions/changed-files was infiltrated leading to the exposure of...
AI-Supported False GitHub Repositories Boost SmartLoader and LummaStealer Distribution
Malicious actors can deploy malware via GitHub for conducting highly damaging assaults, particularly when paired with advanced threats like Lumma...
