…61 Elevation of Privilege Vulnerabilities 6 Security Feature Bypass Vulnerabilities 31 Remote Code Execution Vulnerabilities 14 Information Disclosure Vulnerabilities 8 Denial of Service Vulnerabilities 13 Spoofing Vulnerabilities When BleepingComputer reports on Patch…
Grafana breach caused by missed token rotation after TanStack attack By Bill Toulas May 20, 2026 11:46 AM The Grafana data breach was caused by a single GitHub workflow token that…
…When GitHub credentials are available, the malware uses the GitHub API to automatically create new repositories under the victim’s account and upload the stolen data to them. Socket has found 1…
…The Shai-Hulud campaign emerged last September and had multiple iterations [ 1 , 2 , 3 ], some of them exposing hundreds of thousands of developer secrets in automatically generated GitHub repositories. Among more recently…
…The malware emerged on GitHub last week, with a message allegedly from TeamPCP saying "Here We Go Again - Let the Carnage Continue. A Gift from TeamPCP." The chalk-tempalte package appears to…
…How to Spot it Before it Empties Your Wallet Ukraine identifies infostealer operator tied to 28,000 stolen accounts GitHub investigates internal repositories breach claimed by TeamPCP Microsoft blames macOS update for…