Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 1 year, 4 months ago

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

Cybersecurity researchers are calling attention to an incident in which the popular GitHub Action tj-actions/changed-files was compromised to leak secrets from repositories using the continuous integration and continuous delivery (CI/CD) workflow

More from The Hacker News 17 Mar 2025, 11:11 p.m. Compromise Github Incident Leak Research

The Hacker News 2 years, 3 months ago

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

Security researchers have uncovered a "credible" takeover attempt targeting the OpenJS Foundation in a manner that evokes similarities to the recently uncovered incident aimed at the open-source XZ Utils project

More from The Hacker News 17 Apr 2024, 3:16 a.m. Council Github Incident JavaScript Open Source Research

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt