The GhostAction campaign has reportedly compromised around 1,900 GitHub accounts and targeted more than 30,000 repositories to steal CI/CD secrets, cloud credentials and API keys.
Next.js has released an emergency security update fixing critical remote code execution vulnerabilities and a denial of service issue affecting certain applications using caching and SVG processing features.
Google’s cybersecurity teams have identified an active cyber campaign linked to ShinyHunters targeting Oracle PeopleSoft systems, with higher education institutions among the most affected sectors.
The cybersecurity landscape is continuously evolving, with threat actors constantly refining their methods to bypass security measures. Over recent years, there has been a...