The CISO's Guide: From VPN Replacement to Comprehensive ZTNA Modernize secure access and eliminate lateral movement by connecting users directly to applications. See What AI Really Means for Cyber ...

A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected ...

Aqua Security revealed on March 21 that attackers hijacked 75 of 76 GitHub Actions tags for its Trivy vulnerability scanner, distributing credential-stealing malware through the widely used security ...

An autonomous AI agent known as hackerbot-claw has mounted a systematic campaign against misconfigured continuous integration and delivery workflows on GitHub, successfully triggering remote code ...

Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments.

Customer stories Events & webinars Ebooks & reports Business insights GitHub Skills ...

" 该安全厂商也承认最新攻击源于对hackerbot-claw事件的不完整遏制。 Shakury说："我们轮换了机密和Token，但这个过程不是原子性的，攻击者可能已经获得了刷新的Token。 我们现在采取更严格的方法，锁定所有自动化操作和任何Token，以彻底消除问题。 " ...

On March 24, the campaign moved to Pypi. The Litellm packages in versions 1.82.7 and 1.82.8 have been poisoned with the same infostealer malware as the one used in the original campaign, and later on ...

近期，一个自主运行的基于 AI 的机器人系统性地利用了主流开源代码库中的 GitHub Actions 工作流，在多个目标上实现远程代码执行并窃取具有写入权限的凭证。StepSecurity 联合创始人 Varun Sharma 披露 了这些发生在 2026 年 2 月 21 日至 2 月 28 日期间，针对微软、DataDog ...