🚨 Alerts
CI Secret Stealer Hits 1,800+ GitHub Repos via Stolen Accounts
An attacker used 4,837 stolen GitHub accounts to plant code that steals CI secrets and cloud credentials; it ran in at least 1,806 repositories.
#supply chain attack
3 articles
📰 News
Trezor Finds Spy Implants in Wallets Sold by Reseller CryptoBilis
Trezor says three Safe 5 wallets bought from reseller CryptoBilis hid an extra circuit board that reads the recovery phrase and sends it over a cellular link.
🚨 Alerts
Cursor Breach: Fake Claude Code Extension Drops SSH Backdoor
Cursor says an attacker used a leaked vendor access key to push two malicious Claude Code extension builds to its marketplace for about 11 hours on October 29.