The breach, now known to have begun in March, raises questions about why it took six months for Salesloft to detect the ...

A single compromised GitHub account allowed hackers to breach hundreds of companies, including major tech and cybersecurity ...

Thousands of secrets such as PyPI and AWS keys, GitHub tokens, and more, were stolen recently during a supply-chain attack ...

Investigations into the Nx "s1ngularity" NPM supply chain attack have unveiled a massive fallout, with thousands of account ...

Millions of users of GitHub, the premier online platform for sharing open-source software, rely on stars to establish their ...

To prevent similar compromises in the future, pin GitHub Actions to commit hashes instead of version tags and use GitHub's allow-listing feature to restrict unauthorized actions. Those supply chain ...

Google-owned Mandiant, which began an investigation into the incident, said the threat actor, tracked as UNC6395, accessed the Salesloft GitHub account from March through June 2025. It's currently not ...