The Cyber Security Hub™

#cybersecurity #infosec #hacking

Attacker Used 4,837 Hijacked GitHub Accounts to Run a CI Secret Stealer in 1,806+ Repositories: Starting Tuesday, an attacker used stolen credentials for 4,837 GitHub accounts to plant a secret stealer in… thehackernews.​com/2026/11/4837-hijacked-github-accounts-ran-ci.​html

Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers Execute Code Remotely: A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server.… thehackernews.​com/2026/11/critical-apache-http2-flaw-could-let.​html

ScreenConnect Attacks Target at Least 288 Endpoints Across 48 Organizations With Rogue Clients: ConnectWise has taken the precautionary step of disabling five third-party extensions in partner environments… thehackernews.​com/2026/11/screenconnect-attacks-target-at-least.​html

Disgraced former CA eMudhra blames buggy script for hopelessly weak certificates: Couldn’t get the hardware it needed to generate certs, so tried… www.​theregister.​com/security/2026/11/12/disgraced-former-ca-emudhra-blames-buggy-script-for-hopelessly-weak-certificates/5309244