Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
Hackers targeted 61 public GitHub repositories in a coordinated command injection campaign designed to steal data from automated development systems.
Summary
Radware researchers identified 83 malicious issues, pull requests, and comments posted on September 1, 2026, with evidence that injected commands executed inside two GitHub Actions workflows.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Stories like this are part of why proactive security testing exists, finding the gap before someone else does is always cheaper than responding after the fact.
Coverage details
We've archived 270 other articles touching the same topic (github, cyber security, cyber security news) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.