News Targeted

News

Articles tagged with hub

GitHub expands security tools after 39 million secrets leaked in 2024

Category: IT|Apr 3, 2025 | Author: Admin

GitHub announced updates to its Advanced Security platform after it detected over 39 million leaked secrets in repositories during 2024, including API keys and credentials, exposing users and organizations to serious security risks. [more]

EncryptHub linked to MMC zero-day attacks on Windows systems

Category: IT|Mar 25, 2025 | Author: Admin

A threat actor known as EncryptHub has been linked to Windows zero-day attacks exploiting a Microsoft Management Console vulnerability patched this month. [more]

RansomHub ransomware uses new Betruger ‘multi-function’ backdoor

Category: IT|Mar 23, 2025 | Author: Admin

A newly identified custom backdoor deployed in several recent ransomware attacks has been linked to at least one RansomHub ransomware-as-a-service (RaaS) operation affiliate. [more]

GitHub Action supply chain attack exposed secrets in 218 repos

Category: IT|Mar 21, 2025 | Author: Admin

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it, with it estimated that only 218 repositories exposed secrets due to the supply chain attack. [more]

Supply chain attack on popular GitHub Action exposes CI/CD secrets

Category: IT|Mar 17, 2025 | Author: Admin

A supply chain attack on the widely used 'tj-actions/changed-files' GitHub Action, used by 23,000 repositories, potentially allowed threat actors to steal CI/CD secrets from GitHub Actions build logs. [more]

Fake LDAPNightmware exploit on GitHub spreads infostealer malware

Category: IT|Jan 11, 2025 | Author: Admin

A deceptive proof-of-concept (PoC) exploit for CVE-2024-49113 (aka "LDAPNightmare") on GitHub infects users with infostealer malware that exfiltrates sensitive data to an external FTP server. [more]

HubSpot phishing targets 20,000 Microsoft Azure accounts

Category: Microsoft|Dec 22, 2024 | Author: Admin

A phishing campaign targeting automotive, chemical, and industrial manufacturing companies in Germany and the UK is abusing HubSpot to steal Microsoft Azure account credentials. [more]

Over 12 million auth secrets and keys leaked on GitHub in 2023

Category: IT|Mar 13, 2024 | Author: Admin

GitHub users accidentally exposed 12.8 million authentication and sensitive secrets in over 3 million public repositories during 2023, with the vast majority remaining valid after five days. [more]

GitHub warns users to enable 2FA before upcoming deadline

Category: IT|Dec 27, 2023 | Author: Admin

GitHub is warning users that they will soon have limited functionality on the site if they do not enable two-factor authentication (2FA) on their accounts. [more]