Hackers targeted 61 public GitHub repositories in a coordinated command injection campaign designed to steal data from automated development systems. Radware researchers identified 83 malicious issues, pull requests, and comments posted on September 1, 2026, with evidence that injected commands executed inside two GitHub Actions workflows. The... Weiterlesen: Hackers Target 61 GitHub Repositories With Command Injection Attacks …
Intelligence View
⚡ tsecurity.de Intelligence
Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI/CD Secrets
Hackers targeted 61 public GitHub repositories in a coordinated command injection campaign designed to steal data from automated development systems. Radware…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan openbaar toegankelijke diensten met OpenVAS, scherp WAF regels, verkort patch windows.
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
8 Bronnen
We’re Scouring Amazon for Early Black Friday Deals. Shop Top Discounts on Apple, Sony and More Before the Rush
7 andere bronnen
CCNET2 uur geledenSave Up to $840 on a Lectric E-Bike With These Deals Ahead of Black Friday CCNET1 uur geledenThese Early Black Friday Laptop Deals Can Already Save You Hundreds on MacBooks and More ZZDNET3 uur geledenSony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNET3 uur geledenSony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNET3 uur geledenSony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday ZZDNET3 uur geledenSony’s premium WH-1000XM6 headphones are back down to their lowest price ever ahead of Black Friday
+1
8 Bronnen
CVE-2026-53613 | Linux util-linux mount toctou (Nessus ID 374940)
7 andere bronnen
VVulDB Updates5 uur geledenCVE-2026-53612 | Linux util-linux Mount mount toctou (Nessus ID 374940) VVulDB Updates5 uur geledenCVE-2026-53614 | Linux util-linux mount privileges management (Nessus ID 374940) VVulDB Updates4 uur geledenCVE-2026-99239 | Linux Kernel up to 7.3.0 L2CAP __l2cap_chan_add toctou (EUVD-2026-115281) VVulDB Updates3 uur geledenCVE-2026-72083 | Linux Kernel up to 7.2-rc3 SCSI Target Core core_scsi3_emulate_pro_register_and_move use after free (Nessus ID 374938) VVulDB Updates3 uur geledenCVE-2026-74283 | Linux Kernel up to 7.1.4 tipc netlink_net_capable permission (Nessus ID 374938) VVulDB Updates3 uur geledenCVE-2026-93787 | Linux Kernel up to 6.12.110/6.18.52 smb cifs_filldir out-of-bounds (Nessus ID 374938)
+1
8 Bronnen
CVE-2026-99241 | Linux Kernel up to 7.2.13 NTFS ntfs_filemap_page_mkwrite race condition (EUVD-2026-115283)
7 andere bronnen
VVulDB Updates4 uur geledenCVE-2026-99240 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Damon Core mm/damon/core.c damos_commit_quota_goal target_value divide by zero (EUVD-2026-115282) VVulDB Updates4 uur geledenCVE-2026-99237 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 tracing update_last_data_if_empty race condition (EUVD-2026-115279) VVulDB Updates4 uur geledenCVE-2026-99238 | Linux Kernel up to 6.18.59/7.2.13/7.3.0 Tracing trace_module_record locking (EUVD-2026-115280) VVulDB Updates4 uur geledenCVE-2026-99235 | Linux Kernel up to 7.3.0 Tracing event_hist_trigger_free use after free (EUVD-2026-115277) VVulDB Updates4 uur geledenCVE-2026-99236 | Linux Kernel up to 7.3.0 tracing predicate_parse out-of-bounds (EUVD-2026-115278) VVulDB Updates4 uur geledenCVE-2026-99233 | Linux Kernel up to 7.3.0 Histograms event_hist_trigger_parse/hist_unreg_all event_call/ref use after free (EUVD-2026-115275)
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4313175/veilig-programmeren/hackers-target-61-github-repositories-with-command-injection-attacks-to-steal-cicd-secrets/