GitHub Pages is a tool tracked across 5 threat clusters and 9 intelligence report mentions on ThreatCluster. First observed April 20, 2026; most recent activity June 29, 2026.
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
Microsoft has dismantled the StegoAd operation, removing 119 malicious Edge extensions that used steganography to hide malware within image and font files. The campaign, active since 2021, targeted over 2.6 million…
A modular phishing operation named GitBait has been uncovered, targeting at least 12 Mexican financial institutions over three years. This campaign utilizes GitHub Pages to host fake banking websites, employing a…
In early April 2026, a coordinated subdomain takeover campaign was discovered, affecting 34 major US universities, including MIT, Harvard, and Stanford. The attackers, identified as Hazy Hawk, exploited abandoned CNAME…
On May 26, 2026, GitHub experienced a significant outage affecting its GitHub Actions and GitHub Pages services due to authentication failures. The disruption began at approximately 10:57 UTC, impacting developers and…