NewsBleepingComputer
Fake security tools on GitHub push backdoors and infostealers
Teaser from the source
Cybersecurity professionals are being targeted with infected security projects on GitHub that deploy a backdoor and information stealer malware. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on GitHub
Other advisories
- HighCVE-2026-123852JetBrains Junie GitHub Action: fehlerhafte Autorisierung
- MediumCVE-2026-123851JetBrains Junie GitHub Action: Sicherheitslücke
- HighCVE-2026-123852JetBrains Junie GitHub Action: fehlerhafte Autorisierung
- MediumCVE-2026-123851JetBrains Junie GitHub Action: Sicherheitslücke
- HighCVE-2026-110288Microsoft GitHub Enterprise Server: Mehrere Schwachstellen
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-34986CVE-2026-34986 in github.com/go-jose/go-jose/v4 - Patched by Root
- Not ratedosv:ROOT-APP-GOBINARY-CVE-2026-116587CVE-2026-116587 in github.com/go-jose/go-jose/v4 - Patched by Root
- MediumCVE-2026-118237GitHub Enterprise Server: Lesen außerhalb des zugewiesenen Speichers (Out-of-bounds Read)
Other news entries
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
- Agents reveal secrets when offered to team up with each otherNewsThe Register — Security
- Threat actors use agentic AI tooling to find and abuse exposed secretsNewsMicrosoft Threat Intelligence
- Microsoft GitHub Enterprise Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- GitBook breach: SSO flaw led to production access; all API tokens revoked, rotate integration secretsBreachpwn.watch
- Hugging Face malware campaign returns to hijack GPUs for crypto miningNewsBleepingComputer
- Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto MinersNewsThe Hacker News
- Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hourNewsThe Register — Security
ID