GitHub Actions Abused as Attack Infrastructure in Credential Theft Campaign
GitHub Actions is a CI/CD platform that has been weaponized by attackers to launch scanning and exploitation payloads against cPanel and WHM…
Tag: credential theft
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…
Amadey and StealC Malware Network Disrupted: 27 Million Stolen Credentials Recovered
A coordinated international law enforcement operation, supported by private sector partners including Bitdefender, Bitsight, ESET, and Microsoft, has successfully dismantled the criminal…
CVE-2026-41940: Authentication Bypass in cPanel and WHM
CVE-2026-41940 is an authentication bypass vulnerability in cPanel and WebHost Manager (WHM) that allows remote attackers to gain elevated control of the…