GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
GitHub on Wednesday officially confirmed that the breach of its internal repositories was the result of a compromise of
#cybersecurity
共收录 2713 条相关情报。
← 返回所有主题Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
CVE-2026-9082
Drupal has released security updates for a "highly critical" security vulnerability in Drupal Core that could be exploit
Ukraine identifies infostealer operator tied to 28,000 stolen accounts
The Ukrainian cyberpolice, working in conjunction with U.S. law enforcement, has identified an 18-year-old man from Odes
Hackers bypass SonicWall VPN MFA due to incomplete patching
2026年5月20日，BleepingComputer报道称，黑客利用SonicWall Gen6 SSL-VPN设备上不完整的补丁绕过多因素认证（MFA），暴力破解VPN凭证并部署勒索软件工具。该攻击凸显了厂商补丁修复不彻底带来的安全风险
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
Microsoft has unveiled two new open-source tools called RAMPART and Clarity to assist developers in better testing the s
Grafana breach caused by missed token rotation after TanStack attack
The Grafana data breach was caused by a single GitHub workflow token that slipped through the rotation process following
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
Microsoft on Tuesday said it disrupted a malware-signing-as-a-service (MSaaS) operation that weaponized the company's Ar
Profiling User Vulnerability to Phishing Through Psychological and Behavioral Factors
该论文研究了用户对网络钓鱼攻击的脆弱性，重点关注心理和行为因素。研究基于Spamley数据集，包含1086名参与者在真实钓鱼检测任务中的表现。通过探索性因子分析（EFA），识别出五个潜在因子：经验（Seniority）、专业知识（Exper
Identity Alone Isn't Enough: Why Device Security Has to Share the Load
Identity checks alone can't stop attackers using stolen session tokens and compromised devices. Specops Software outline
Drupal critical update to fix bug with high exploitation risk
Drupal has announced a "core security release" scheduled for later today, warning that threat actors might develop explo
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
Cybersecurity researchers have flagged fresh activity from a China-aligned threat actor known as Webworm in 2025, deploy
Agent AI is Coming. Are You Ready?
New Industry Data Just Released Suggests Not. On May 19th, 2026, Orchid Security released the results of our Identity G
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat ac
Exploit released for new PinTheft Arch Linux root escalation flaw
PinTheft, a recently patched Linux privilege escalation vulnerability, now has a publicly available proof-of-concept (Po
Typosquatting Is No Longer a User Problem. It's a Supply Chain Problem
AI-generated lookalike domains are now embedded inside the third-party scripts running on your web properties. Here's wh
Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit
CVE-2026-45585
Microsoft on Tuesday released a mitigation for a BitLocker bypass vulnerability named YellowKey following its public dis
GitHub confirms breach of 3,800 repos via malicious VSCode extension
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malic
Microsoft shares mitigation for YellowKey Windows zero-day
Microsoft has shared mitigations for YellowKey, a recently disclosed Windows BitLocker zero-day vulnerability that grant
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production sys
GitHub investigates internal repositories breach claimed by TeamPCP
GitHub is investigating a breach of its internal repositories after the TeamPCP hacker group claimed to have accessed ap