At a Glance Actor or group Unattributed threat actor; no group name published Activity type GitHub Actions abuse, internet scanning, credential theft Targets Internet-facing cPanel and WHM servers…

The Microsoft-owned code repository, GitHub, recently published a blog post announcing a sweeping overhaul of its security initiatives. This transformation primarily abandons the previous floating…

Emergence of AgentBaiting Threat Vector The surging popularity of artificial intelligence tools has transformed skill directories into lucrative initial access points. Attackers target Model Conte…

GitHub has always been one of the most trusted platforms for developers. But what happens when attackers start abusing that trust?

Redefining Value in an Automated Era As automated vulnerability discovery becomes increasingly frictionless, software developers place an unprecedented premium on verified, empirical results. Effe…

GitHub recently paid $100,000 bug bounty for discovering a critical vulnerability in GitHub’s internal Git infrastructure. The reason lies…

BitChat is a decentralised mesh messaging tool. It comes from a company founded by Twitter co-founder Jack Dorsey. The app builds a mesh network across nearby devices over Bluetooth, so messages h…

Hey everyone! Nitin here 👋

GitHub and the Python Package Index (PyPI) have introduced strategic delays into dependency updates, discouraging developers from inadvertently deploying malicious packages upon initial release. D…

What is FuzzingLocalBot?

This research project was born after reading many news articles about supply chain attacks and highly used packages being compromised to…

How I used a 3-line bash script to find 8 backdoorable plugins in an official plugin registry — and why this attack requires zero exploits.

TASK — 01: CHALLENGE

You know the finding I mean.

A curious incident has come to light. According to an official Mozilla Security Blog post, the GPG signing key used to authenticate Firefox for Linux and Thunderbird for Linux packages has been ro…