GitHub Security Lab

Mentions · 7d0
Mentions · 30d0
All mentions5
First seenSep 24, 2026
Last mentionedOct 2, 2026

Timeline

5 articles · newest first

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

Weekly roundup: iCloud spoofing bugs bypass SPF/DKIM/DMARC, TA419 spies phish AI policy experts, Cloudflare fixes cross-tenant data leak, Poper Blocker harvests AI chats.

SecurityWeekOct 2, 14:30 UTC · Oct 2, 2026Vulnerability3 · 2 reads

GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws

GitHub’s AI security agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.

Cyber Security NewsSep 29, 12:42 UTC · Sep 29, 2026Research2 · 1 read

GitHub AI Agent Uncovers 24 Android App Vulnerabilities

GitHub's AI audit agent found 24 Android flaws, including OsmAnd tracking and Wikipedia account takeover.

GBHackersSep 29, 11:42 UTC · Sep 29, 2026Vulnerability1 · 1 read

How we found 24 Android vulnerabilities using our open source AI security agent

GitHub Security Lab’s AI taskflows uncovered 24 Android bugs, including OsmAnd location tracking.

GitHub Blog · SecuritySep 28, 19:00 UTC · Sep 28, 2026Research11 · 5 reads

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

GitHub Security Lab's Taskflow Agent autonomously fuzzes C/C++ repositories with AFL++ and writes vulnerability reports.

GitHub Blog · SecuritySep 24, 18:26 UTC · Sep 24, 2026Tools4 · 1 read

Appears with

GitHubvendor · 4
Androidproduct · 3
OsmAndproduct · 3
Taskflow Agentproduct · 3
Wikimediaorganization · 2
GitHub Copilotproduct · 2
Cloudflareorganization · 1
Microsoftorganization · 1
Appleorganization · 1
Kiteworksorganization · 1
TA419threat actor · 1
Claude Sonnet 5ai model · 1
AFL++product · 1
GitHuborganization · 1
Poper Blockerorganization · 1
Proofpointorganization · 1

Entities are extracted by the model from each article. First seen Sep 24, 2026, last mentioned Oct 2, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.