Back Cybersecuritynews

Hackerbot-Claw Bot Attacks Microsoft and DataDog via GitHub Actions CI/CD Misconfiguration

Cybersecuritynews •Tushar Subhra Dutta • March 3, 2026

Between February 21 and February 28, 2026, an autonomous bot named hackerbot-claw launched a week-long attack campaign against major open source repositories. It targeted GitHub Actions CI/CD pipelines belonging to Microsoft, DataDog, the Cloud Native Computing Foundation, and several other widely used projects. Over seven days, it opened more than 12 pull requests across at […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Automated AI Attack Targets Major GitHub Repositories An AI-powered bot, known as hackerbot-claw, executed a week-long attack on CI/CD pipelines of major open-source GitHub repositories, leading to remote code execution vulnerabilities. The attack compromised at least five repositories, including Project-akri, through direct script injection methods. The incident highlights the growing sophistication of automated cyber threats in software development environments. 9 sources 47

Extracted Entities

Hackerbot-Claw Bot Attacks Microsoft and DataDog via GitHub Actions CI/CD Misconfiguration

The full story

Extracted Entities

Attack Types (1)

Companies (3)

MITRE ATT&CK (1)

Tools (1)