The Megalodon campaign infiltrated over 5,700 GitHub repositories with malicious CI/CD workflows and stole sensitive credentials, using fake identities and hidden Base64 payloads to harvest cloud credentials, SSH keys, and API keys at scale.

Security vulnerabilities in Windows drivers can be exploited without the original hardware, facilitating BYOVD attacks to disable security systems, with new analysis demonstrating how hardware-gating can be bypassed and presenting a significant security risk.