The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
Ukraine's SSU and FBI have uncovered a long running Russian intelligence phishing campaign targeting messaging app users, including government officials, military personnel, politicians, and activists across Ukraine, Europe, and the United States.
A global operation led by U.S., China, and UAE authorities dismantled nine crypto scam centers, arrested 276 suspects, and seized $701 million while exposing large scale cryptocurrency fraud and human trafficking linked cyber operations.