7 results
Japan's Cyber Security Cloud says a tip from an external organization revealed that one employee's work GitHub credential had leaked, and on Nov 5 access logs showed suspicious past access apparently by a third party using it .
Aikido says that since November 10 an attacker has used stolen GitHub credentials across 4,837 compromised accounts to open probe pull requests in 61,764 repositories, and at least 1,835 repositories ran the payload and had GitHub Actions secrets and cloud credentials stolen .
BleepingComputer reports that cloud hosting provider Railway published an incident report confirming attackers obtained its internal source code and decrypted environment variables for at most 1.
Railway said the attack ran from October 20 to 22 and aimed to obtain AI provider API keys for distillation attacks, interrupting builds and deployments .
A joint government-civilian team under Korea's science ministry confirmed data from 39.
The Japanese crowdfunding platform CAMPFIRE said on 24 April 2026 that personal data may have leaked from part of the systems that manage customer information, affecting 225,846 unique users, and that credit-card data is not included .
CERT-EU said the AWS account behind the European Commission's europa.