Skip to content

Tag

Data Breach

8 stories since Aug 2025.

8
stories
MAY 20
latest
GitHub Octocat figurine standing in front of a blurred laptop screen
Intrusions

GitHub Confirms Internal Breach

The company said it is still working through the intrusion but does not believe any customer repositories or data was affected at this point.

DENNIS FISHER · MAY 20 · 3 min
Policy

Two British Teens Charged Over Scattered Spider Hacks

Two British teenagers have been arrested by UK authorities for their alleged ties to the Scattered Spider cybercriminal collective.

Lindsey O'Donnell-Welch · 3 min
AI

New Automated npm Attack Campaign Targets Dozens of Packages

The campaign does not appear to be connected to the previous npm phishing attacks, but it does seem to be related to a rash of GitHub and npm token and secret thefts from the end of August.

Dennis Fisher · 3 min
Intrusions

Attack Compromises Popular NPM Packages

The affected packages include Chalk and Debug, and one of the contributors to those packages said the compromise was the result of him clicking on a phishing email related to setting up 2FA on his account.

Dennis Fisher · 4 min
Intrusions

Cloudflare Details Salesloft Drift Breach

This incident is the latest to stem from an intrusion at Salesloft in which attackers used OAuth tokens to target Salesloft customers’ Salesforce integrations.

Dennis Fisher · 3 min
Intrusions

UNC6395 Expands Data Theft Campaign to Email OAuth Tokens

Google researchers discovered the new attacks and are advising all customers to treat any authentication tokens for those integrations as compromised.

Dennis Fisher · 2 min

Newsletter

The Decipher Brief

Every week: the stories, the episode, the clips.

Newsletter sign-up is coming soon.