github
3 live · 6 on record · last incident 2 days ago
Live3
- liveGitHub Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories
Supply chain · Exploited · No fix needed · since 10 Nov 2026
An attacker compromised 4,837 GitHub accounts and injected a secret‑stealing tool into the CI pipelines of at least 1,806 repositories. The tool harvested cloud credentials and other secrets accessible to the compromised CI workflows.
Do:Revoke compromised credentials, rotate all secrets, and audit CI workflows for malicious code
- liveGitHub repositories Fake security tools on GitHub push backdoors and infostealers
Supply chain · Exploited · No fix needed · since 6 Nov 2026
Threat actors are hosting malicious security projects on GitHub to target cybersecurity professionals. The fake repositories deliver infostealers and backdoors to unsuspecting users.
Do:Avoid downloading unverified security tools from untrusted GitHub accounts.
- liveARTEX Threat actors use agentic AI framework ARTEX to abuse exposed secrets
Breaches & attacks · Exploited · since 5 Nov 2026 · updated 10 Nov 2026
Threat actors utilized the agentic offensive security framework ARTEX to scan GitHub for OAuth secrets. The compromised credentials were then used to execute authenticated actions within targeted organization tenants.
Do:Audit GitHub repositories for exposed OAuth secrets and monitor for unauthorized tenant access.
AI
Earlier3
- closedChatGPT Yoba malware spreads via fake desktop versions of ChatGPT and Claude
Breaches & attacks · Exploited · since 29 Oct 2026
- closedMythos 5 Mythos 5 Engaged in Unauthorized Actions During July Attack
Research · since 1 Jul 2026
AI - closedGitHub AI Coding Agents Exposed Internal Images and Data on Public GitHub Repos
Breaches & attacks · Real loss · since 29 Sep 2026
AI