Identity

The latest breaches, scams and hacks in plain English, newest first.

6 stories

Identity

Malicious GitHub Actions Workflows Stole Credentials from Thousands of Repositories

Attackers used compromised maintainer accounts to plant credential-stealing workflows in tens of thousands of GitHub repositories, targeting developer secrets and cloud credentials.

9 Oct 20263 min read

Identity
FBI arrests suspected ShinyHunters hacker after major data breach
The FBI has arrested a suspected member of the ShinyHunters group, believed to be behind a breach of the bureau's jobs website that exposed sensitive employee data.
9 Oct 20263 min read
Identity
Why Passwords Are Becoming Obsolete: How Passkeys Aim to Stop Data Breaches
Passwords are now seen as a major security risk. Passkeys, a new login method, promise to make stolen database logins useless to hackers. Here’s how they work and what to watch out for.
9 Oct 20263 min read
Identity
Discord users’ data exposed in Double Counter bot breach
A breach at the Double Counter bot exposed data from about 28 million Discord accounts, including usernames, IP addresses and email addresses, according to The Verge.
7 Oct 20262 min read
Phishing
Fake ChatGPT and Gemini Sites Target Ad Account Managers with Phishing Attacks
Attackers are using fake AI chatbot sites to steal advertising account credentials and MFA codes, putting businesses and their clients at risk. The campaign uses convincing login popups and targets agency staff and administrators.
6 Oct 20264 min read
Phishing
N0va Phishing Kit Targets US and EU Businesses with Advanced Identity Attacks
A new phishing kit called N0va is targeting organisations in North America and Europe, using trusted brands and legitimate authentication flows to steal access tokens and compromise business accounts.
16 Sept 20263 min read

The day's cyber news in 5 minutes.

Cyberend Daily is one short email with the stories that matter, written so anyone can follow.

No spam · 100% free · Unsubscribe anytime

Identity

6 stories

Malicious GitHub Actions Workflows Stole Credentials from Thousands of Repositories

FBI arrests suspected ShinyHunters hacker after major data breach

Why Passwords Are Becoming Obsolete: How Passkeys Aim to Stop Data Breaches

Discord users’ data exposed in Double Counter bot breach

Fake ChatGPT and Gemini Sites Target Ad Account Managers with Phishing Attacks

N0va Phishing Kit Targets US and EU Businesses with Advanced Identity Attacks

The day's cyber news in 5 minutes.