A reel disaster for GitHub.

CyberWire Daily roundup covering multiple recent cybersecurity developments: a phishing campaign targeting nearly 12,000 GitHub repositories using OAuth app hijacks; BlackLock and HELLCAT ransomware activity impacting dozens of organizations including a breach at Jaguar Land Rover via compromised Jira credentials; a supply-chain attack affecting over 100 car dealerships; disclosure of a widespread RSA key vulnerability affecting millions of keys; a life insurer notifying ~335,500 individuals of a December 2024 breach; release of an Akira ransomware decryptor; and resources aimed at helping NGOs and high-risk individuals, plus policy commentary on cyber information-sharing.