Information security
fromSecurityWeek
5 days agoOver 5,500 GitHub Repositories Infected in 'Megalodon' Supply Chain Attack
Megalodon used GitHub Actions workflow injection via automated commits to steal CI and cloud secrets from thousands of repositories.