Kaspersky’s Global Research and Analysis Team (GReAT) has conducted a major review of the GitHub Actions workflows within top-starred repositories. Leveraging newly introduced Kaspersky Container Security capability, the researchers have discovered 8 repositories with critical misconfigurations that could lead to supply chain compromise.

Open-source components are now indispensable to modern software engineering. However, they also introduce hidden vectors for supply-chain attacks, such as the prominent Mini Shai-Hulud campaign conducted by TeamPCP in May 2026.

This attack exploited weaknesses in GitHub Actions build pipelines and led to the compromise of more than 170 npm and PyPI packages, affecting projects such as TanStack, Mistral AI, and OpenSearch.

In general, misconfigured GitHub Actions workflows can transform trusted development pipelines into dangerous entry points, allowing attackers to compromise automated workflows, introduce malicious code into production environments, or access critical infrastructure keys.

Kaspersky GReAT experts have completed the assessment of GitHub Actions workflows, analysing more than 130,000 pipelines across 30,000 of the platform’s top starred repositories.

Utilising the specialised scanning ruleset introduced in the latest Kaspersky Container Security update, the researchers identified over 250,000 potential misconfigurations in continuous‑integration/continuous‑delivery (CI/CD) processes, underscoring the widespread adoption of insecure configuration practices. Only 10% of the analysed repositories triggered no alerts at all.

Among the discovered issues 59.8 % are classified as low‑risk, 39.8 % as medium‑risk, and 0.4 % fall into the high‑risk category according to Kaspersky taxonomy.

The most frequent issues involve implicitly granted or overly broad access permissions, missing version pinning for dependencies and workflow‑level settings. Fewer repositories expose top-level secrets, use unsafe run conditions, or process external data insecurely, potentially leading to more severe compromises.

Among 200 repositories identified as high-risk, the team discovered 8 repositories with critical flaws that could lead to supply chain compromise. The affected repositories spanned a wide range of use cases, including AI integration in enterprise environments, developer and automation services and security testing tools. The identified critical issues were reported to the respective developer.

“Over the past year, we have observed serious supply-chain attacks, that could have been prevented by following secure CI/CD configuration guidelines,” said Leonid Bezvershenko, senior security researcher at Kaspersky GReAT. “While the uncovered issues do not automatically indicate exploitable vulnerabilities, they point to areas where developers should verify and strengthen configurations.

“By identifying these weaknesses early, organisations can build more resilient pipelines and reduce the likelihood of supply-chain compromise. The rules developed for our container security solution provide a practical framework to identify and remediate these gaps before they can be exploited.”

To detect and mitigate potential security issues caused by misconfigurations, Kaspersky Container Security users can leverage GitHub repository scanning, whether embedded directly into CI/CD pipelines or operated in standalone mode.

Easy interaction with exclusive Kaspersky reports, geo-filtering and actionable intelligence in a single click: expert insights on Advanced Persistent Threats (APT), Crimeware and Industrial Control Systems (ICS) threats are now available directly in Kaspersky Threat Intelligence Portal — with charts and visuals rendered inline.

In an era of increasingly sophisticated and frequent attacks, threat intelligence inevitably evolves into a business enabler that equips security teams with strategic advantage in their mission to back their company’s stability and growth.

Kaspersky, a recognised leader in threat intelligence, facilitates informed decision-making and proactive risk mitigation by introducing simplified access to actionable and relevant threat insights.

Kaspersky Threat Intelligence Reporting is a subscription-based service delivering over 200 in-depth analysis reports annually. These insights are compiled by Kaspersky’s Global Research and Analysis Team, Industrial Control Systems Cyber Emergency Response Team and Threat Research experts through the continuous tracking of more than 900 threat actors and campaigns.

Following the update, all reports previously representing a library of static PDF files (that is more than 2000 exclusive Kaspersky reports published to date) are now structured and can be examined directly in the Kaspersky Threat Intelligence Portal. For offline use, the standard PDF download format remains available as well.

The update also introduces deeper integration within each report, featuring direct links to indicators of compromise (IoCs), detection rules (including YARA), and MITRE ATT&CK® techniques. Users can now perform a single-click drill-down into specific threat actors, malware families and Common Vulnerabilities and Exposures (CVEs) across diverse geographies and industries.

Smart geo-filtering streamlines investigations by prioritising content explicitly mentioning a selected country, followed by broader regional intelligence, giving analysts a complete geographic view in a single query.

Enhanced Kaspersky Threat Intelligence Reporting supports the following use cases:

• Customised content discovery: apply geo, industry and software filters to instantly retrieve a list of relevant reports.
• Exclusive intelligence: access the most recent incident investigation reports, including those without public disclosure, to understand the nature of an attack and identify the actions required for mitigation.
• Actionable intelligence extraction: extract and apply threat data from the reports and apply it across specific infrastructure to detect traces of compromise.
• In-depth Threat Lookup and contextual analysis: investigate suspicious indicators identified within the network and quickly determine if a specific IoC is linked to a related threat report.

“Empowering cybersecurity teams in their mission-critical daily work to ensure business resilience in a complex threat landscape. This is the main driver behind our ongoing visual and functional improvement initiative.

While updating Kaspersky Threat Intelligence Portal, we focused on refining the customer experience by optimising processes of active investigation, proactive incident monitoring and detailed mitigation techniques,” comments Alexander Mazikin, Head of Threat Intelligence Product Line at Kaspersky.

Weebly, US-based free, beginner-friendly, drag-and-drop website builder and eCommerce service, will no longer be available for customers in 67 countries, including Nigeria, after September 2026, according to an email seen by Nigeria CommunicationsWeek.

Weebly said it is “winding down” services in different nations “due to changes in regulation and to simplify our global operations”.

The firm released a timeline of gradual changes, to help existing users access their data before the site shuts down.

Starting June 29, customers of 67 countries were no longer able to publish any new pages.

September 27, 2026: Weebly websites will be unpublished.

Before this date, users should download site content and data. Follow these steps:

Go to Account Settings, click on My Data, and select Download My Data.

This will help you migrate your content to another website provider, or retain it.

Concerned about privacy? Ask Weebly to delete your data, through the Erase Data and Forget Me option under the My Data tab on your account page.

December 26, 2026: Last date of accessing Weebly account.

Until this date, you will have access to the account, although sites will be unpublished.

This period helps users move their site, domains, and data to another service.

Domain names can be moved to another registrar only after 60 days from the registration date.

According to the Weebly website, users must make sure that they do not make changes to your registrant contact information (email, phone number, first/last name), as this will lead to a 60-day registrar lock and prevent you from transferring your domain name.

Note that domain name transfers work differently for country-specific domains; users must contact Weebly’s support team for assistance.

How to unlock, transfer domain name

From your Weebly Dashboard, go to websites, and click on Domains, then select Manage Domain.

Disable registrar lock, get EPP authorisation code, and copy the full code.

Disabling registrar lock will also disable privacy protection. It is important to set privacy protection once again with the new registrar.

Follow the instructions for the newly chosen registrar as the rest of the transfer process will be managed by them

Why is Weebly winding down?

While the firm attributed it to “a change in regulation,” online users have argued that Square, which acquired Weebly in 2018, is pushing its platform ‘Square Online’.

Square is originally a US-based payment processor, and the firm says it has since evolved into the “largest business tech platform”.

It calls Square Online a “free online store” but clarifies that those who do not sell online can also use it to build their websites.

In an earlier support update for the Weebly Website Builder, Square Online was consistently referred to as a better alternative, although at the time, it was said that Square “has no plans to discontinue the Weebly website builder”.

Which countries will Weebly no longer be available in?  Albania, Algeria, Andorra, Armenia, Aruba, Azerbaijan, Bahamas, Bahrain, Bangladesh, Barbadoa, Belarus, Benin and Bosnia and Herzegovina.

Others are: Cambodia, Cameroon, Chile, Colombia, Congo, Costa Rica, and Côte d’Ivoire.

Also affected are: Ecuador, Egypt, Ethiopia, French Polynesia,    Gabon, Georgia, Ghana, Guinea, Iceland, Jordan, Kazakhstan, Kenya, Laos, Malaysia, Mauritius, Moldova, Montenegro, Morocco, Nepal and New Caledonia.

The rest are: Nigeria, Oman, Pakistan, Palau, Paraguay, Peru, Russia, Saudi Arabia, Senegal, Serbia, Sierra Leone, Singapore, South Korea, Suriname, Taiwan, Tajikistan, Tanzania, Thailand, Turkey, Uganda, Ukraine, United Arab Emirates, Uruguay, Uzbekistan, Vietnam, Zambia and Zimbabwe.