eMudhra's dangerous certificates: Mac git, curl, python3, and node all let them through. Previous fixes didn't work either

Four days ago, I wrote an article titled "There are 41 places on my Mac where I still trusted eMudhra's dangerous ...
BleepingComputer

Hackers steal 15,000 cloud credentials from exposed Git config files

A large-scale malicious operation named "EmeraldWhale" scanned for exposed Git configuration files to steal over 15,000 cloud account credentials from thousands of private repositories. According to ...

git push hangs and never finishes (Windows). It was waiting for a login in an invisible window

I was having an AI agent handle my work when git push stopped finishing. No error was displayed, and nothing happened even after several minutes. This is a record of how I identified and fixed the ...
CSOonline

Cybercriminals intensify hunt for exposed Git secrets

About 4,800 unique IP addresses were scanned for exposed Git configuration files in a single day to steal sensitive secrets and tokens. Git configuration files exposed in public repositories are being ...
Help Net Security

Git vulnerability leading to RCE is being exploited by attackers (CVE-2025-48384)

CVE-2025-48384, a recently patched vulnerability in the popular distributed revision control system Git, is being exploited by attackers. Details about the attacks are not public, but the confirmation ...
heise online

Git configuration files targeted by attackers – Incidents are on the rise

The IT security company Greynoise observed a significant increase in crawling activity for Git configuration files in April of this year. On April 20 and 21, the company registered around 4800 unique ...