Attackers used stolen GitHub credentials belonging to 4,837 accounts to probe 61,764 repositories in a campaign targeting software development secrets and cloud access. Beginning November 10, the operation injected malicious workflows into accessible repositories, with evidence of credential exfiltration from at least 1,806 repositories. At least... Weiterlesen: Hackers Compromise Nearly 5,000 GitHub Accounts to Steal Secrets From…
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Compromise Nearly 5,000 GitHub Accounts to Steal Secrets From Software Development Pipelines
Attackers used stolen GitHub credentials belonging to 4,837 accounts to probe 61,764 repositories in a campaign targeting software development secrets and…
Hacking & Pentesting GBHackers Security | #1 Globally Trusted Cyber Security News Platform 1 Min. Lesezeit TA0010 · T1041 Cloud & IT-Enterprise
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
13 Quellen
Nvidia-Krise: Verwaltungsrat berät über Rauswurf von Jensen Huang
12 weitere Quellen
Hheise online Newsvor 4 Std.Nvidia-Chef Jensen Huang nach zweiter Affäre wohl vor dem Ende bei seiner Firma Iifun.devor 1 Std.Nvidia vor Führungswechsel: Jensen Huang droht Abberufung AAppleInsider Newsvor 9 Std.Nvidia CEO Jensen Huang expected to be ousted TThe Mac Observervor 6 Std.Nvidia CEO Jensen Huang Expected to Be Fired After Second Affair With Company VP Revealed TThe Mac Observervor 5 Std.Nvidia stock sinks 8.6% after hours as Jensen Huang faces reported ouster AAI | The Vergevor 9 Std.Nvidia is reportedly preparing to fire Jensen Huang
+6
12 Quellen
Microsoft AI Exposes 21-Year-Old Linux Kernel Bug Among 59 Security Issues Reported to Maintainers
11 weitere Quellen
VVulDB Updatesvor 12 Std.CVE-2025-68724 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 crypto check_add_overflow integer overflow (EUVD-2025-205073 / Nessus ID 279784) VVulDB Updatesvor 12 Std.CVE-2025-68349 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 NFS_INO_LAYOUTCOMMIT reference count (EUVD-2025-205105 / Nessus ID 279775) VVulDB Updatesvor 12 Std.CVE-2025-68725 | Linux Kernel up to 6.18.1 skb_warn_bad_offload privilege escalation (Nessus ID 279716 / WID-SEC-2025-2920) VVulDB Updatesvor 12 Std.CVE-2025-68371 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 scsi sdev_destroy use after free (EUVD-2025-205083 / Nessus ID 279717) VVulDB Updatesvor 12 Std.CVE-2025-68363 | Linux Kernel up to 6.12.62/6.17.12/6.18.1 /include/linux/skbuff.h __netif_receive_skb_core privilege escalation (EUVD-2025-205091 / Nessus ID 279712) VVulDB Updatesvor 12 Std.CVE-2022-50711 | Linux Kernel up to 6.0.5 mtk_probe memory leak (Nessus ID 280035 / WID-SEC-2025-2920)
+5
12 Quellen
GitHub Release: can1357/oh-my-pi v18.19.0 (12.11.2026)
11 weitere Quellen
GGitHubvor 2 TagenGitHub Release: signalapp/Signal-Desktop v@signalapp/[email protected] (09.11.2026) GGitHubvor 2 TagenGitHub Release: signalapp/Signal-Desktop v@signalapp/[email protected] (09.11.2026) GGitHubvor 9 Std.GitHub Release: signalapp/Signal-Desktop v8.35.0 (12.11.2026) GGitHubvor 8 Std.GitHub Release: signalapp/Signal-Desktop v8.36.0-beta.1 (12.11.2026) GGitHubvor 13 Std.GitHub Release: google/clusterfuzz v2.47.2 (11.11.2026) GGitHubvor 12 Std.GitHub Release: openai/codex vrust-v0.167.0-alpha.4.3 (11.11.2026)
+5
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4335579/hacking-pentesting/hackers-compromise-nearly-5000-github-accounts-to-steal-secrets-from-software-development-pipelines/