ThreatCluster

Increase in Supply Chain Attacks on GitHub Actions Reported in 2025

First seen 12 Dec 2025, 19:51 UTC • •54

Article Content

1 / 2

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

At the Black Hat Europe conference, researchers reported a rise in supply chain attacks targeting GitHub Actions in 2025. They emphasized the need for developers to adopt a shared responsibility model for securing open source software, rather than relying solely on GitHub for protection.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 219d ago How this analysis works

More articles in this cluster (1)

Threat Graph

3 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Supply Chain Attack

Affected Platform (1)

GitHub

Tool (1)

GitHub Actions

Relationships

Supply Chain Attack targets GitHub

Continue Reading

Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…

Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…