Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Showing 2 most recent headlines Filtered view

The Hacker News 2 months, 2 weeks ago

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled credential theft, GitHub Actions tampering, and SSH persistence

More from The Hacker News 1 May 2026, 9:43 p.m. Credentials Exploit Github Malicious Payload SSH Supply Chain Theft

The Hacker News 2 months, 3 weeks ago

No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks

The cybersecurity industry has spent the last several years chasing sophisticated threats like zero-days, supply chain compromises, and AI-generated exploits. However, the most reliable entry point for attackers still hasn't changed: stolen credentials

More from The Hacker News 21 Apr 2026, 11:30 p.m. Artificial Intelligence Credentials Exploit Initial Access Supply Chain Theft

Latest cybersecurity reporting from selected sources.

Refine the feed

Volume over time

Fresh headlines available

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

No Exploit Needed: How Attackers Walk Through the Front Door via Identity-Based Attacks