Trivy vulnerability scanner breach pushed infostealer via GitHub Actions
(bleepingcomputer.com)
1.
2.
TeamPCP Turns Cloud Infrastructure into Crime Bots
(darkreading.com)