Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
Radware threat hunters identified 83 attacks occurring primarily within a 43-minute window on September 1. The attacker likely used 74 compromised accounts to execute commands in CI/CD environments, aiming to eventually alter repository code.
Key points
- Targeted 61 public repositories including Brave and Google LangExtract
- Used 74 likely compromised GitHub accounts
- Attacks occurred in a narrow 43-minute window
- Goal was likely a supply-chain attack to gain repo credentials
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. The Register did the reporting; read the original for the full story.
Read the full story at The Register
