CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking ...

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...

New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub.

Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack ...

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

StepSecurity disclosed a compromise of the popular GitHub Action tj-actions/changed-files, which works to detect file changes ...

CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...

The endgame of the recent cascading supply chain attack on GitHub was to breach Coinbase, one of the world’s most popular ...

The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.

Researchers say compromised tool in the GitHub CI/CD environment stole credentials; infosec leaders need to act immediately.

Git is a powerful tool for managing code and collaborating with devs. Here are some helpful Git beginner's tips to help you ...