GitHub Actions Compromised to Exfiltrate CI/CD Credentials
Threat actors hijacked a popular GitHub Actions workflow, redirecting all tags to an imposter commit to harvest CI/CD credentials. Review CI workflows and revoke compromised tokens.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Wednesday, May 20
Monday, May 18
Instructure Resolves Canvas Data Breach with Security Agreement
PremiumInstructure reached an extortion settlement to prevent data leaks from Canvas, affecting thousands of schools. Monitor for affected organizations and assess risk exposure.
Critical Vulnerability in Open WebUI Puts AI Workspaces at Risk
PremiumA stored XSS flaw in Open WebUI allows 1-click remote code execution when uploading a profile image. Patch status and mitigations required to protect AI workspaces.
Critical Vulnerability in Fortinet's FortiSandbox Exposes Enterprise Networks
PremiumFortinet disclosed a critical remote code execution flaw in FortiSandbox (CVE-2026-26083) requiring urgent patching to prevent unauthenticated code execution. Prioritize affected deployments.
Microsoft's May 2026 Patch Tuesday Addresses 120 Vulnerabilities Across Critical Systems
PremiumMicrosoft released a broad May 2026 Patch Tuesday covering 120 vulnerabilities across Windows, Azure, and Office, including 29 critical RCE flaws. Patch management is essential to reduce exposure.
New Exploit Exposes Windows Vulnerability, Urgent Patch Advised
PremiumPoC demonstrates SYSTEM-level privilege escalation on patched Windows; rapid patching recommended.
OpenAI Responds to TanStack Supply Chain Breach
PremiumTwo OpenAI employee devices were compromised; credential material stolen from code repositories. No user data or production systems affected.
Urgent Mitigations Released for Microsoft Exchange Zero-Day Vulnerability
PremiumMicrosoft issues mitigations for a high-severity Exchange Server zero-day (CVE-2026-42897) exploited in the wild. Install mitigations promptly.
Friday, May 15
Microsoft Releases Critical Security Patches for 138 Vulnerabilities
PremiumMass patch Tuesday covering DNS, Netlogon, and privilege-escalation flaws; prioritize critical patches in risk mitigations.
Foxconn Faces Ransomware Attack Impacting North American Operations
PremiumRansomware overlay amid 600+ manufacturing sector hits; highlights supply-chain risk and downtime impact.
Cyberattackers Exploit Microsoft Teams to Breach Corporate Networks
PremiumInitial access via social engineering on Teams; rapid persistence emphasis for defenders to harden collaboration tools and training.
Monday, May 11
Critical Zero-Day Vulnerability in Linux Threatens System Security
PremiumDirty Frag zero-day enables root via PoC exploits across many distros; patch guidance issued.
Let’s Encrypt Restores Services After Certificate Issuance Interruption
PremiumShort halt on issuance due to a cross-signed root issue; service restored after hours with mitigations.
Ivanti Releases Critical Patch for Exploited Zero-Day Vulnerability
PremiumCVE-2026-6973 exploited in targeted attacks; patches released to mitigate. Immediate patching recommended.
Microsoft Addresses Critical Vulnerabilities in 365 Copilot Services
PremiumThree critical disclosures in Microsoft 365 Copilot and Copilot Chat were remediated; end-user action not required per advisories.
Friday, May 8
Critical Vulnerabilities Found in Ivanti EPMM Demand Immediate Patching
PremiumIvanti Endpoint Manager Mobile 0-day vulnerabilities are being exploited; patch on-premises deployments immediately.
xlabs_v1 Botnet Targets Exposed Android Debug Bridge for DDoS Attacks
PremiumNew Mirai-derived botnet targets exposed ADB on IoT devices for large-scale DDoS; isolate exposed endpoints and rotate credentials.
Urgent Patch Required for PAN-OS Zero-Day Vulnerability Actively Exploited
PremiumPan-OS users face an actively exploited zero-day; apply patches urgently to mitigate potential RCE and persistence risk.
Chrome 148 Security Update Delivers Critical Vulnerability Fixes
PremiumChrome 148 closes 127 vulnerabilities, including critical overflow and use-after-free flaws. Update immediately to reduce exploitation risk.
Get these articles delivered to your inbox.
Subscribe free