Data Breaches
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Hi, what are you looking for?
SecurityWeek
All posts tagged "GitHub"
Application Security
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
Application Security
Dependabot gets a three-day cooldown window before opening pull requests, and PyPI rejects file uploads to releases older than 14 days.
Malware & Threats
Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members.
Malware & Threats
A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware.
Artificial Intelligence
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication.
Supply Chain Security
By default, npm install will no longer execute scripts from dependencies, unless explicitly allowed.
Vulnerabilities
A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.
Application Security
Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.
Data Breaches
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.
Vulnerabilities
The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.
Artificial Intelligence
Researchers found an OpenAI Codex vulnerability that could have been exploited to compromise GitHub tokens.
Supply Chain Security
Hackers published a malicious scanner release and replaced tags to point to information-stealer malware.
Malware & Threats
Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.
Vulnerabilities
Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.
Application Security
VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.
Artificial Intelligence
Hidden comments allowed full control over Copilot responses and leaked sensitive information and source code.
Application Security
GitHub will implement local publishing with mandatory 2FA, granular tokens that expire after seven days, and trusted publishing.
Application Security
A supply chain attack called GhostAction has enabled threat actors to steal secrets and exploit them.
Supply Chain Security
The private repositories of hundreds of organizations were published publicly in the second phase of the Nx supply chain attack.
Malware & Threats
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
Malware & Threats
Data Breaches
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
Mobile & Wireless
