Cyber Attacks
OVHcloud CLI Releases Tampered With to Harvest Local Secrets
A hijacked developer account allowed an attacker to swap five OVHcloud command-line tool archives with secret-stealing malware for less than two hours.
GitHub
Everything RedTeam Log has reported about GitHub: 4 stories, newest first. Part of our Cyber Attacks coverage.
Cyber Attacks
GitHub Actions: Stolen Dev Keys Push Fake Scripts to Mine Secrets from Git History
Attackers used stolen developer credentials to push fake security scripts, harvesting secrets from code history and current files.
Vulnerabilities
GitHub Prototype Pollution and SSRF Patches Broken 4x More Likely to Reach CISA's Exploit List
Terra Security reports that nearly 2.3% of GitHub patches are broken within three months in 2026, a significant jump from previous years.
Cyber Attacks
Fake Dubai Airport Docs Deliver Blinder Tunnel Malware to Iraq via GitHub C2
Unit 42 analysis reveals an Iran-nexus group leveraging fake recruitment lures and GitHub for command-and-control against Iraqi targets.