Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories

The Hacker News - Nov 12, 2026

Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in repositories those accounts could write to, according to Aikido Security, a security software company. The stealer is built to take the secrets and cloud credentials that a repository's CI workflows can reach. It ran in at least 1,806 repositories, where the attacker has likely collected

Read full article
More News
Apple may make future iPhones shorter and more compact with new 18:9 display design

Apple may make future iPhones shorter and more compact with new 18:9 display design

Apple is reportedly considering shorter iPhones with an 18:9 display ratio instead of the current 19.5:9 design to improve one-handed usability. The redesign could also bring a smaller Dynamic Island or an under-display camera.

Read more
Nexperia’s China unit claims supply chain ‘localisation’ as rift with Dutch parent deepens

Nexperia’s China unit claims supply chain ‘localisation’ as rift with Dutch parent deepens

Nexperia’s Chinese unit says its domestic 12-inch wafer platform now covers all of its product categories, marking a key milestone in building an independent supply chain more than a year after its Dutch parent halted direct shipments of European wafers. Speaking at the 23rd China International Semiconductor Expo in Beijing on Thursday, Nexperia China CEO John Chang said the local division had partnered with domestic foundries while relying on its own facilities and local contractors to handle...

Read more
Turkey & AIIB strike $1.6 billion deal for climate policy after COP31

Turkey & AIIB strike $1.6 billion deal for climate policy after COP31

Turkey & AIIB strike $1.6 billion deal for climate policy after COP31The Asian Infrastructure Investment Bank just finalized a groundbreaking deal with the host of the 2026 COP31, Turkey and its all going towards climate policy. According to a report that tracks financial need, there needs to be...

Read more
Campaigners want more land protected from housing

Campaigners want more land protected from housing

After parkland was safeguarded from development, residents want the council to change a housing plan.

Read more
Art trail celebrates arrival of black bears at zoo

Art trail celebrates arrival of black bears at zoo

Jersey Zoo says the art trail will celebrate the world's "largest inhabitants to its smallest.

Read more
Nurdle impact to be researched for a year

Nurdle impact to be researched for a year

Research will be carried out on sea-birds and marine life following a microplastic spillage in July.

Read more
'Summer was a wake-up call, winter could be dire' warning over food supplies

'Summer was a wake-up call, winter could be dire' warning over food supplies

Wales needs to grow more fruit and veg or it will be at the mercy of wars and climate change, one expert says.

Read more
Public funds ploughing cash into AI will own megatrends shaping economy

Public funds ploughing cash into AI will own megatrends shaping economy

GLOBAL-SWF/AI:Public funds ploughing cash into AI will 'own' megatrends shaping economy

Read more
Nvidia’s Board Is Weighing Jensen Huang’s Future

Nvidia’s Board Is Weighing Jensen Huang’s Future

Mr. Huang has been under scrutiny for an affair with a woman said to be a Chinese spy, as well as for a relationship with an executive at his A.I. chip company.

Read more
AI investment faces reality check as returns remain unproven, next 18 months critical: Goldman Sachs

AI investment faces reality check as returns remain unproven, next 18 months critical: Goldman Sachs

The massive investment in artificial intelligence infrastructure is facing a reality check as concerns grow over whether technology companies will be able to generate sufficient returns from their spending, with the next 18 months emerging as a crucial period for the sector.

Read more
Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

NVIDIA-PROBE/CHINA-CHIPS (EXCLUSIVE):EXCLUSIVE-Chinese AI firms rush to secure Nvidia chip capacity as spy scandal stirs fear of US curbs

Read more
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects versions 2.4.55 through 2.4.70 and is fixed in version 2.4.71, released yesterday. Only servers with HTTP/2 enabled are affected, according to Red Hat, which ships the server as part of Red Hat Enterprise Linux. An attacker who can reach the

Read more

About Us

Delivering news from all over the globe, StarJournal keeps you abreast with the greatest minds in science, be it researchers, theorists or even popularizers.