Threat actors are abusing the GitHub API to systematically enumerate organizations, repositories, and user accounts, Datadog reports. Spanning multiple overlapping campaigns, the activity has been ongoing for several months, relying on ghost accounts that were registered two to five years… Read More "Ghost Accounts Abuse GitHub API in Mass Recon Campaign"
A threat actor has built a network of over 200 GitHub repositories that have been delivering Windows malware, supply chain protection provider Socket reports. Dubbed Operation Muck and Load, the campaign involves 222 lure repositories across 190 accounts that contain… Read More "Network of 200 GitHub Repositories Used for Malware Infection"
A critical prompt injection vulnerability in GitHub Agentic Workflows could allow unauthenticated attackers to leak private repository data, Noma Labs warns. GitHub Agentic Workflows allows users to write workflows in natural language using markdown files that an AI agent will… Read More "Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection"
