GitHub Apps - Tool

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
January 15, 2026
Last Seen
January 25, 2026

GitHub Apps is a tool tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed January 15, 2026; most recent activity January 25, 2026.

Related Threat Clusters

  • AWS Console Vulnerability Exposed to Supply Chain Attack

    A critical vulnerability known as CodeBreach was identified in the AWS Console, allowing potential attackers to take control of core AWS GitHub repositories, including the AWS JavaScript SDK. This misconfiguration in…

    7 articles · Updated January 15, 2026
  • AWS CodeBuild Misconfiguration Exposes Global Cloud Environments

    A critical misconfiguration in AWS's CodeBuild service allowed complete takeover of AWS's GitHub repositories, affecting every AWS environment worldwide. Wiz security researchers disclosed the issue to AWS in August…

    2 articles · Updated January 15, 2026
  • Regex Flaw Exposes AWS GitHub Repos to Supply-Chain Risk

    AWS has acknowledged a critical vulnerability, dubbed CodeBreach, affecting some of its open-source GitHub repositories. This flaw, identified by Wiz Security's research team, could have allowed the introduction of…

    1 article · Updated January 25, 2026

Recent Intelligence Reports

  • Two Missing Characters: How a Regex Flaw Exposed AWS GitHub Repos to Supply — Infoq · January 25, 2026
  • Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console — News.Ycombinator · January 15, 2026
  • A simple CodeBuild flaw put every AWS environment at risk — Theregister · January 15, 2026

Related Entities

Privilege Escalation Supply Chain Attack Nx S1ngularity Nx S1ngularity Incident Amazon AWS The Duckbill Group Wiz Security AWS CodeBuild AWS Console CodeBuild GitHub

CVSS v3.1 Breakdown