BankInfoSecurity

Novo Nordisk Data Breach Tied to Stolen GitHub Access Tokens

Cyber extortion group FulcrumSec continues to find hardcoded credentials in public-facing IT infrastructure and exploit them as part of what it's dubbed a ...
Unite.AI

Researchers Tie OpenAI Agents to 12 Newly Identified Sites

Researchers published an additional-findings update on September 9, 2026, identifying 12 more websites that AI agents they ...
Crypto Briefing

Uniswap Labs enhances hook builder support with new tools

Uniswap Labs rolls out new developer tools for v4 hooks including an AI security plugin, public hook registry, audit ...
Help Net Security

Your threat feed is someone else’s database: What ingesting malware intel at scale takes

Threat intelligence feed ingestion is not a checkbox. Five production lessons from running Dependabot's malware advisories at ...
thenextweb.com

Grok Build was uploading entire Git repositories to xAI’s cloud, including committed secrets

A security researcher published a wire-level analysis on July 12 proving that xAI’s Grok Build coding CLI was packaging developers’ entire tracked repositories, including full Git history, committed ...
BleepingComputer

Clean GitHub repo tricks AI coding agents into running malware

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious payload that remains invisible to security scanners, AI agents, and human ...
techtimes

GitHub Malicious Repositories: 10,000 Trojan Clones Evade Detection for Over a Year

A security researcher published findings today showing that roughly 10,000 GitHub repositories have been quietly delivering Trojan malware to developers for over a year — some for considerably longer ...
techtimes

7 Best GitHub Repositories for Modern Database Systems, SQL Tools, and Data Engineering

GitHub hosts a wide range of database repositories that support developers working with database systems, SQL tools, and modern data engineering workflows. These open source database tools help power ...
TechSpot

Hackers breach GitHub and access 3,800 internal repositories now listed for sale

What we know so far: Hackers have reportedly used a malicious Visual Studio Code extension to gain access to a GitHub developer's machine, then leveraged the stolen credentials to move into GitHub's ...
Wired

A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale

A so-called software supply chain attack, in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the ...
VentureBeat

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and ...
InfoWorld

GitHub admits major source code leak after 3,800 internal repositories breached

Microsoft’s GitHub has suffered what appears to be its biggest ever security breach after confirming that attackers exfiltrated code from around 3,800 of the company’s internal repositories. News of ...