New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories

Infosecurity Magazine feed covering recent cyber threats and incidents, including a large-scale GitHub Actions supply-chain compromise, vendor and customer data breaches, financial theft, ransomware, attacks on industrial refrigeration and healthcare infrastructure, mobile and web exploitation, state-sponsored espionage, AI-enabled attacks, cryptocurrency theft, botnets, and emerging defensive guidance. The most prominent item reports a malicious workflow affecting tens of thousands of GitHub repositories, including repositories associated with Uber.