CVE-2025-30066 supply chain attack compromised tj-actions on March 14, 2025, exposing 218 repositories and leaking ...

Researchers have determined that Coinbase was the primary target in a recent GitHub Actions cascading supply chain attack ...

The endgame of the recent cascading supply chain attack on GitHub was to breach Coinbase, one of the world’s most popular ...

CISA confirms cascading attack from reviewdog to tj-actions exposed sensitive credentials across 23,000+ repositories.

The compromise of GitHub Action tj-actions/changed-files has impacted only a small percentage of the 23,000 projects using it ...

According to the cybersecurity firms analyzing the incident, the attacker initially tried to compromise the Coinbase ...

StepSecurity disclosed a compromise of the popular GitHub Action tj-actions/changed-files, which works to detect file changes ...

CISA warns of CVE-2025-30066, a GitHub supply chain attack exposing secrets via compromised actions logs. Update ...

New versions of the Albabat ransomware target Windows, Linux, and macOS, and retrieve configuration files from GitHub.

The GitHub Action supply chain compromise that threatened the security of more than 23,000 repositories appears to be linked ...

More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.

Researchers from Palo Alto Networks said the hackers likely planned to leverage an open source project of the company for ...