We know a bit more about the GitHub Actions supply chain attack from last month. Palo Alto’s Unit 42 has been leading the ...
A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen ...
Leaked SpotBugs PAT in November 2024 led to a GitHub supply chain attack, compromising Coinbase in March 2025.
Researchers claim primary target of a recent cascading supply chain attack was Coinbase The cryptocurrency exchange was not ...
Evidence shows a SpotBugs token compromised in December 2024 was used in the March 2025 GitHub Actions supply chain attack.
According to the cybersecurity firms analyzing the incident, the attacker initially tried to compromise the Coinbase ...
The threat actors initially attempted to compromise projects associated with the Coinbase cryptocurrency exchange, said Palo ...
Researchers from Palo Alto Networks said the hackers likely planned to leverage an open source project of the company for ...
Coinbase successfully thwarted a supply chain attack targeting its open-source AI toolkit, agentkit. However, Coinbase’s ...
The stolen funds were swiftly moved across multiple blockchains, significantly complicating efforts to trace and recover them.
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.