01
Security
Fake GitHub security tools now target professionals with backdoors and infostealers
Developers and security staff who download booby-trapped repositories risk having their browser data, wallets and accounts taken.
Developers and security staff who download booby-trapped repositories risk having their browser data, wallets and accounts taken.
Affected machines can turn the security feature back on once they install updates released on or after October 28, 2026.
The intrusions show that certificate settings and automatic containment exclusions can matter as much as any single flaw.
Attackers rotate the repositories quickly and clean up after infection, so checking the owner before any download matters more than usual.
Fake install pages for Claude Code, Codex and NotebookLM show genuine-looking commands while copying malicious ones, a trick that exploits trust in the AI brands themselves.
A Red Heron–linked actor used fresh WordPress and ZyXEL bugs to raid government and small-business systems worldwide for credentials and personal data.