Bleeping Computer

GitHub Actions being actively abused to mine cryptocurrency on GitHub servers

GitHub Actions is currently being abused by attackers to mine cryptocurrency on GitHub's servers in an automated attack. GitHub Actions is a CI/CD solution that makes it easy to setup periodic tasks ...
InfoWorld

Thousands of open source projects at risk from hack of GitHub Actions tool

App development teams who use a popular utility in the GitHub Actions continuous integration and continuous delivery/deployment (CI/CD) platform need to scrub their code because the tool was ...

Unity has found a security vulnerability that has sat dormant for almost a decade: 'Take immediate action to protect your games & apps'

It was given a high severity score by Unity and a CVSS score of 8.4. With 10 being the most severe, this vulnerability is ...
Bleeping Computer

GitHub Action hack likely led to another in cascading supply chain attack

The tj-actions developers cannot pinpoint exactly how the attackers compromised a GitHub personal access token (PAT) used by a bot to perform malicious code changes. Today, Wiz researchers think they ...