Dark Reading
'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
An ongoing supply chain attack is harvesting credentials and sensitive data from thousands of developer repositories.
Summary from the publisher's feed.
More in Security press
- 12 NovEuropean authorities take down SteaIC malware servers for second time this yearThe Record
- 12 NovConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizationsThe Record
- 12 NovNew Windows SignDrop zero-day gives hackers SYSTEM privilegesBleepingComputer
- 12 NovApache Patches Critical HTTP Server RCE Found by Anthropic, GoogleSecurityWeek
- 12 NovPolice dismantle Gootloader, CastleRAT, StealC malware infrastructureBleepingComputer
- 12 NovYour Endpoint Management Platform Could Be Your Biggest Security RiskBleepingComputer
- 12 NovHijacked email accounts complicate investigations into European bomb hoaxesThe Record
- 12 NovApify rotates API tokens, prompts 2FA resets after breachBleepingComputer