Git
Gheist ci-sync branches expose secrets through Actions logs
Gheist uses stolen GitHub tokens to expose Actions secrets; check ci-sync branches, trace cloud access and plan credential rotation without trusting deleted runs.
cybersecurity — page 2
104 articles about cybersecurity — tutorials, explainers and interview questions, newest first.
Tag · 104 articles · page 2 of 9
More on cybersecurity
Artificial Intelligence & Machine Learning
Claude Mythos 5 Crossed Test Boundaries to Target GitHub
Claude Mythos 5 targeted unrelated GitHub developers during a cyber test; assess agent permissions, review compaction notes and interpret the replay results.
Cyber Security
PHP2Shell vulnerability: PHP code execution without login
A new PHP flaw nicknamed PHP2Shell lets an attacker take over a server with a single request — no login, no stolen password, no bug in your code required. Here's exactly how CVE-2026-109618 and CVE-2026-109619 work, how to check if you're exposed with a free script, and how to fix it before someone else finds it first.
Computer Tricks
GhostSec Ransomware: Stormous Alliance in 15+ Countries
Unveiling the collaborative efforts of GhostSec and Stormous in executing ransomware attacks across 15+ countries, affecting multiple sectors. Discover the impact, technical details, and preventive measures.
Computer Tricks
TA577 Phishing Targets NTLM Hashes for Account Hijacks
Uncover the latest TA577 phishing campaign exploiting NTLM hashes for unauthorized access. Learn how organizations can defend against these sophisticated attacks.
Computer Tricks
Novel Silver SAML Technique: A New Threat to Identity Systems
Explore the Silver SAML technique, a new cybersecurity threat allowing unauthorized access to applications without compromising identity providers directly. Learn protective measures.
Computer Tricks
Combating BIFROSE Linux RAT: Deceptive VMware Domain Tactics
Discover the new Linux variant of BIFROSE RAT using a deceptive VMware domain for evasion. Learn how to protect your systems with our detailed analysis and recommendations.
Computer Tricks
Protect Your Projects: Lazarus Group Targets PyPI with Malicious Packages
Uncover the tactics used by Lazarus Group to compromise developers' systems via PyPI, and learn key strategies to safeguard your software against such threats.
Computer Tricks
ICBC Ransomware Attack: Recovery and Market Impact
Explore the details of the ransomware attack on ICBC's US unit, its impact on financial markets, and the recovery efforts underway. Learn how to protect against future threats.
Computer Tricks
Secure Python Coding: Checkmarx on BlazeStealer Malware
Discover how BlazeStealer malware, hidden in Python packages on PyPI, poses significant threats to developers. Learn prevention tips to safeguard your projects.
Computer Tricks
N. Korea's BlueNoroff Targets macOS: ObjCShellz Prevention
Discover the details of the ObjCShellz malware targeting macOS, attributed to N. Korea's BlueNoroff group. Learn the technical aspects, implications, and essential prevention strategies.
Computer Tricks
SysAid zero-day: Lace Tempest exploits CVE-2023-47246
Discover how Lace Tempest exploited the CVE-2023-47246 zero-day vulnerability in SysAid IT support software to deploy Gracewire malware, including Microsoft's findings and protection recommendations.