Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
More on GitHub
Other advisories
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-77524CVE-2026-77524 in github.com/kedacore/keda/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-95837CVE-2026-95837 in github.com/containerd/containerd/v2 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-63209CVE-2026-63209 in github.com/klauspost/compress - Patched by Root
- Not ratedosv:CVE-2026-59185identrail: Cross-tenant GitHub installation binding without ownership verification
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2025-8556CVE-2025-8556 in github.com/cloudflare/circl - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-1229CVE-2026-1229 in github.com/cloudflare/circl - Patched by Root
- Not ratedosv:openSUSE-SU-2026:12284-1github-mcp-server-2.0.3-1.1 on GA media
- Not ratedosv:openSUSE-SU-2026:12285-1golang-github-prometheus-prometheus-3.15.0-2.1 on GA media
Other news entries
- GhostAction Hacking Wave Fizzles, But Attackers Lurk on in GitHubNewsDark Reading
- Gheist turns GitHub Actions into a secret extraction serviceNewsCSO Online
- Attackers compromised 42 GitHub repositories by using files too large to be searchedNewsCSO Online
- Worm armed 42 GitHub repos by hiding a payload too big to failNewsThe Register — Security
- 'Gheist' Weaponizes GitHub Tokens to Steal Cloud SecretsNewsDark Reading
- Mythos 5 Ignored Real-World Harm in July AttackNewsSecurityWeek
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions LogsNewsThe Hacker News
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release PipelineNewsThe Hacker News
Source: https://thehackernews.com/2026/09/transparent-tribe-deploys-new-rust.html
ID