Current cybersecurity development risk frameworks don’t cover all of the tactics hackers used to compromise SolarWinds, log4j ...

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

Open source software used by more than 23,000 organizations, some of them in large enterprises, was compromised with ...

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...

A security researcher has discovered that the websites of over 100 car dealerships have been compromised in a supply-chain ...

A cascading supply chain attack that began with the compromise of the "reviewdog/action-setup@v1" GitHub Action is believed ...

A compromise of the popular GitHub Actions tool turned into a massive supply chain attack, at this point thought to be ...

Just a year after Alphabet was said to be trying to buy the security shop for a claimed $23 billion, Google Cloud says it has signed a definitive agreement to acquire Wiz, Inc in an all-cash ...

The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.

The websites of over 100 auto dealerships were found serving malicious ClickFix code in a supply chain compromise.

Malicious campaigns targeting code used by developers of AI applications underscore the need to develop comprehensive ...

Security researchers are warning of a supply chain attack against tj-actions/changed-files GitHub Action, which is used in ...