The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
A joint operation by US, Germany, and Canada disrupts major botnets infecting over 3 million IoT devices, highlighting ongoing cybersecurity risks from insecure connected systems.
A new report by Citizen Lab exposes how law enforcement agencies worldwide utilize the Webloc platform to monitor 500 million devices through harvested advertising data.