The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
Anthropic identifies 22 security vulnerabilities in Mozilla Firefox using its Claude Opus 4.6 AI model during a security collaboration with Mozilla, with most issues fixed in Firefox 148.