UPDATED
VentureBeat ·
The creators of NanoClaw — the hit open source, enterprise-friendly variant of autonomous AI agent harness OpenClaw — are moving towards commercializing their technology for enterprises at scale, aiming to provide them with secure AI...
HackRead · · Medium severity
GitHub Breach: TeamPCP stole 3,800 internal repositories through a malicious VS Code extension and is now selling the data online for $95,000.
TechCrunch Security · · Medium severity
The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.
The Record by Recorded Future · · Medium severity
Github, which hosts code for more than 100 million developers worldwide, confirmed the breach on social media after TeamPCP advertised stolen source code on a cybercrime forum.
The Record by Recorded Future · · Medium severity
Senator Maggie Hassan (D-NH) sent a letter to the acting director of the Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday demanding answers about an alleged breach uncovered by cybersecurity reporter Brian Krebs...
The Register · · Medium severity
GitHub, the world's biggest code repository and DevOps platform, fell victim to a malicious Visual Studio Code (VS Code) extension. The company's initial assessment is that only internal repositories were exfiltrated. The incident was...
Infosecurity Magazine · · Medium severity
The prolific threat group TeamPCP has claimed a hack into GitHub’s internal repositories
Help Net Security · · Medium severity
Following TeamPCP’s claim that they’ve breached GitHub’s own private code repositories, the Microsoft-owned company launched an investigation and confirmed the compromise. “Our current assessment is that the activity involved...
SecurityWeek · · Medium severity
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension. The post GitHub Confirms Hack Impacting 3,800 Internal Repositories appeared first on SecurityWeek .
BleepingComputer · · Medium severity
GitHub has confirmed that roughly 3,800 internal repositories were breached after one of its employees installed a malicious VS Code extension.
Help Net Security · · Medium severity
Dependency vulnerability scanning in JavaScript and TypeScript projects has long sat at the end of the development pipeline. Pull requests get opened, continuous integration runs, and a security scanner returns a list of CVE identifiers...
The Hacker News · · Medium severity
Grafana Labs, on May 19, 2026, said an investigation into its recent breach found no evidence of customer production systems or operations being compromised. It said the scope of the incident is limited to the Grafana Labs GitHub...
BleepingComputer · · Medium severity
GitHub is investigating a breach of its internal repositories after the TeamPCP hacker group claimed to have accessed approximately 4,000 repositories containing private code.
The Hacker News · · Medium severity
GitHub on Tuesday said it's investigating unauthorized access to its internal repositories after the notorious threat actor known as TeamPCP listed the platform's source code and internal organizations for sale on a cybercrime forum....
CIO.com ·
Until a few days ago, a publicly-accessible GitHub repository exposed credentials for both US government AWS accounts and internal Cybersecurity and Infrastructure Security Agency (CISA) systems. That’s according to cybersecurity...
CSO Online Security ·
Until a few days ago, a publicly-accessible GitHub repository exposed credentials for both US government AWS accounts and internal Cybersecurity and Infrastructure Security Agency (CISA) systems. That’s according to cybersecurity...
Ars Technica ·
Security researcher Brian Krebs brings us the news that America's Cybersecurity & Infrastructure Agency (CISA) has had a large store of plaintext passwords, SSH private keys, tokens, and "other sensitive CISA assets" exposed in a public...
The Register ·
The US Cybersecurity and Infrastructure Security Agency (CISA) left open a GitHub repository named “Private-CISA” containing plain-text passwords, private keys, tokens, and secrets – with obvious file names like...
Slashdot ·
An anonymous reader quotes a report from KrebsOnSecurity: Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several...
TechCrunch · · Critical severity
The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.
CSO Online Security ·
Faced with the growing volume of submission to its bug bounty program, GitHub is replacing cash bounties with swag rewards for reports with low security impact — and asking researchers to stop submitting reports that are low quality or...
TechRadar · · Medium severity
A composite image featuring a stylized digital military base schematic partially covered by a translucent "Data Leak" warning graphic in red and white.
Digital Trends ·
PhotoGIMP gives GIMP 3.0 a Photoshop-style layout, familiar keyboard shortcuts, and cleaner workspace tweaks for users moving away from Adobe’s editor.
The Hacker News · · Critical severity
In yet another software supply chain attack, threat actors have compromised the popular GitHub Actions workflow, actions-cool/issues-helper, to run malicious code that harvests sensitive credentials and exfiltrates them to an...
Gizmodo ·
Passwords were stored as plain text in a public GitHub repository.
TechRepublic · · Medium severity
Grafana refused an extortion demand after attackers used a stolen GitHub token to download code, with no customer data exposed so far. The post Grafana Rejects Ransom Demand After GitHub Breach Exposes Codebase Theft appeared first on...
Krebs on Security · · Medium severity
Until this past weekend, a contractor for the Cybersecurity & Infrastructure Security Agency (CISA) maintained a public GitHub repository that exposed credentials to several highly privileged AWS GovCloud accounts and a large number of...
TNW · · Medium severity
The hackers exfiltrated a codebase that was already open source, then demanded payment to keep it from being released. Grafana said no, and cited the FBI’s standing advice. It is the second high-profile extortion case in seven days.
BleepingComputer · · Medium severity
Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token.
TechCrunch Security · · Medium severity
The open source project said hackers stole its codebase and threatened to publish its source code if the company did not pay.
TechRadar · · High severity
Help Net Security · · Medium severity
A threat actor has managed to access Grafana Labs’ GitHub environment and download the company’s codebase, the open-source observability and data visualization firm announced on Sunday. The breach is significant given Grafana Labs’...
Silicon Republic · · Medium severity
The hackers have since demanded a ransom payment from Grafana Labs, to prevent the release of its codebase. Read more: Hackers access GitHub and download codebase in Grafana Labs breach
The Register · · Medium severity
Observability outfit Grafana Labs has revealed that an attacker accessed its GitHub repository and stole its codebase. In social media posts the company blamed the situation on an “unauthorized party” who was somehow able to obtain a...
Help Net Security ·
Penetration testing has usually required weeks of manual work, specialized tooling, and teams with narrow skill sets. Lyrie, an open-source autonomous security agent built by OTT Cybersecurity, compresses that process into a command...
Slashdot ·
An anonymous reader shared this report from Electrek: When Fisker Inc. filed for Chapter 11 bankruptcy in June 2024, it left roughly 11,000 Ocean SUV owners holding the keys to vehicles that cost them anywhere from $40,000 to $70,000 —...
The Hacker News · · Medium severity
Grafana has disclosed that an "unauthorized party" obtained a token that granted them the ability to access the company's GitHub environment and download its codebase. "Our investigation has determined that no customer data or personal...
Hackaday ·
Given that some of the more famous demos were by Honda and Tesla, you might be forgiven for thinking you need pockets as deep as a car company to get into humanoid robotics — and maybe that was true once, but now Asimov v1 is here . It...
Electrek ·
filed for Chapter 11 bankruptcy in June 2024, it left roughly 11,000 Ocean SUV owners holding the keys to vehicles that cost them anywhere from $40,000 to $70,000 — and that were rapidly losing the software brains that made them work....
TechRadar ·
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free