Debugging tricks in the browser(alan.norbauer.com)

531 points by bkudria 3 years ago | 95 comments

A blog post listing dozens of lesser-known JavaScript debugging tricks using browser developer tools, such as conditional breakpoints.

Tachy0n: The Last 0day Jailbreak(blog.siguza.net)

243 points by todsacerdoti 1 year ago | 37 comments

Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

Attacking UNIX Systems via CUPS(evilsocket.net)

385 points by NetBender 2 years ago | 280 comments

Security researcher evilsocket's writeup of a remote code execution attack on GNU/Linux and UNIX systems via CUPS and cups-browsed, plus notes on the disclosure process.

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

Sloc Cloc and Code 4.0 (scc) – Finding the files that need the most attention(boyter.org)

28 points by boyter 2 months ago | 1 comments

Gheist campaign plants secret-dumping workflows using stolen GitHub tokens(wiz.io)

44 points by acossta 19 hours ago | 0 comments

Wiz Research blog post analyzing Gheist, a campaign using stolen GitHub tokens to plant workflows that dump repository secrets, with IOCs and response guidance.

What a Hacker Stole from Me(mynoise.net)

355 points by wonger_ 1 year ago | 106 comments

A myNoise blog post by founder Stéphane describing a hacker's attack on the myNoise website, first via code-injection attempts and then a different strategy.

I never authorized an integration that scans my secrets(github.com)

202 points by trvrprkr 9 days ago | 155 comments

A closed GitHub issue on the home-assistant.io repo in which a user complains that an integration scanning their secrets was enabled without authorization, calling it a privacy invasion.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

GitHub confirms breach of 3,800 repos via malicious VSCode extension(bleepingcomputer.com)

985 points by Timofeibu 5 months ago | 430 comments

BleepingComputer news article reporting that GitHub confirmed a breach of about 3,800 internal repositories via a malicious VSCode extension.

I'm being cyberattacked by Tesla, Inc(dreamstation.systems)

389 points by robinpie 1 month ago | 109 comments

Personal blog post describing persistent attack traffic in nginx logs from IPs with Host/Referer headers pointing to pool-ntp.tesla.com.