7 article(s) in our index mention this organisation.
French cybersecurity firm CrowdSec experienced a supply chain attack resulting in the theft of source code from its GitHub repositories. The attack stemmed from the May 2026 TanStack supply chain attack, leading to the e…
A former CrowdSec employee’s GitHub account was used to copy approximately 170 private GitHub repositories, including sensitive data like email addresses, investor details, and internal code, following a supply chain att…
GitHub is implementing a security update to its "actions/checkout" action to mitigate a common supply chain attack vector. The update, effective June 18, 2026, will block the execution of malicious code from untrusted fo…
OpenAI is shifting its cybersecurity strategy from solely discovering vulnerabilities to accelerating the process of patching them, recognizing the overwhelming volume of findings generated by AI. The company is deployin…
A sophisticated cyberattack, dubbed Megalodon, has targeted over 5,500 GitHub repositories using malicious CI/CD workflows. The attacker leveraged throwaway accounts and forged author identities to exfiltrate sensitive d…
A supply-chain attack targeting GitHub originated with a malicious version of the Nx Console VS Code extension, facilitated by the TeamPCP threat group. The attack compromised over 3,800 internal repositories and extende…
The TeamPCP supply chain campaign intensified significantly on May 17th, 2026, marked by the confirmed compromise of a Checkmarx Jenkins plugin and the emergence of a new Mini Shai-Hulud worm. This campaign targeted npm…
