Embedded browsers in Cursor, Copilot, Codex, VS Code and Claude Desktop flawed
Forever Security’s EMBRACE findings show prompt injection, address spoofing, and local file reads; Codex and VS Code were still unpatched.
74
Vendor
GitHub
- Mentions · 7d16
- Mentions · 30d73
- All mentions152
- First seenAug 11, 2026
- Last mentioned12h ago
Timeline
152 articles · newest firstResearchers find 'Embrace' embedded-browser flaws in five AI coding tools; Codex and VS Code unpatched
Flaws in Codex and VS Code remain unpatched; Cursor silently fixed code execution and GitHub fixed Copilot spoofing in 1.1.29.
72
Embedded browsers in five AI coding tools can leak files or run code
As of October 29, Codex and VS Code still let one local HTML click read SSH keys, tokens and .env files.
74
Talos Q3 2026 IR trends: help-desk vishing and rising ransomware
Phishing led initial access in just over one-third of engagements, down from over 50 percent, while ransomware rose to 27 percent.
66
GitHub launches Copilot Fusion to route and combine coding models
Fusion is generally available on all Copilot plans, bills each model at its normal rate, and offers a 30% discount through November 30, 2026.
48
GitHub previews npm firewall that blocks packages at install
Enterprise Cloud customers can enforce malware advisories, severity, attestations, new install scripts and a package-age cooldown.
44
GitHub launches Copilot Fusion to route coding work across models
Paid Copilot users get a 30% Fusion discount through November 30, 2026, while High and Max can use more credits.
52
GitHub npm package firewall can block new versions before install
Enterprises can set a cooldown, alongside AI Scan, Copilot checks, and Dependabot reachability ranking.
38
Gheist harvests secrets through malicious GitHub Actions workflows
Wiz tracked more than 13,500 malicious branches on over 850 accounts since September 15, including private enterprise repositories.
76
Attackers hit 42 GitHub repos with files too large to search
Oversized wrappers and a native addon hid one CI-publisher payload while an npm worm stole tokens and spread through Actions.
76
Gheist uses stolen GitHub tokens to leak private repository secrets
Wiz recovered over 13,500 planted branches from 850-plus accounts; GitHub’s public-repo hold does not cover private repos.
74
Gheist uses stolen GitHub tokens to harvest cloud secrets
Wiz counts more than 13,500 malicious branches on over 850 accounts, still active as of October 24.
76
Gheist used stolen GitHub tokens to steal secrets from 850 accounts
Workflows on more than 13,500 branches logged secrets; public runs were held, while private and Enterprise Server runs completed.
74
GitHub Actions pwn-request fixes still leave checkout gaps
Old actions/checkout SHA pins and triggers such as issue_comment can still run fork code with secrets.
64
Gheist uses stolen GitHub tokens to leak private repository secrets
Wiz found over 13,500 planted branches from more than 850 accounts; GitHub held public runs but not private ones.
76
Gheist abuses stolen GitHub tokens to dump repository secrets
Wiz found more than 13,500 planted branches on over 850 accounts; public runs are held, but private and enterprise repos still execute.
76
Exaforce says GitHub token theft and vishing drain data in minutes
A dormant OAuth token pulled 472 of 638 repositories; ClickFix and help-desk vishing followed the same pattern.
36
Buyer’s guide compares 12 DevSecOps platforms for 2026
The roundup judges GitHub, GitLab, JFrog, Snyk, and others on scanning depth, workflow fit, and pricing.
18
GitHub delays pull requests, webhooks, and Actions
GitHub says event-streaming hotspots are still slowing pull request updates, webhook deliveries, and audit log events.
36
GhostAction workflows in 790 GitHub repos hunt cloud and AI keys
OpenSourceMalware's count through October 9 is validated public repos, not proof that every one leaked secrets.
74
GhostAction plants malicious workflows in 790 GitHub repositories
October payloads mine full Git history for cloud and AI keys and post them over HTTP to 193.32.204.199.
76
GitHub Actions, Pages, and Webhooks hit by degraded availability
GitHub said customers may see delays in workflow runs, site builds, and webhook delivery while it investigates.
28
Ledger implant linked to $93M theft; npm flaw hit 1,500 packages
The roundup also covers an exploited Windows Shell flaw and an Ivanti Connect Secure zero-day chain.
74
AI Can Write the Code. Who Verifies It?
A Faros study and tooling survey say AI coding raises bugs and incidents unless automated verification keeps pace.
48
GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories
GhostAction hid credential-stealing Node.js malware in fake font files across 94 GitHub repositories.
76
12 Best CI/CD Pipeline Security Tools Compared (2026): Features & Pricing
A 2026 comparison ranks native and dedicated tools for securing CI/CD pipelines.
20
Hackers Target Claude, ChatGPT and Cursor Credentials Using Aoki Infostealer
Aoki infostealer now steals Claude, ChatGPT, Cursor, Copilot, and Gemini credentials from developer machines.
58
Critical ChatGPT GitHub Connector Flaw Could Allow Attackers to Steal Private Repository Secrets
Researcher says ChatGPT’s GitHub connector can be prompt-injected into stealing private repository secrets.
62
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
GhostAction compromised about 1,900 GitHub accounts and pushed malicious workflows to steal CI secrets from tens of thousands of repositories.
82
10 Best Secrets Detection Tools Compared (2026): Features & Pricing
A 2026 comparison ranks ten secrets-detection tools, from GitGuardian and TruffleHog to free GitHub and Gitleaks scanning.
18
Top 10 Best DevSecOps Platforms in 2026 [Ranked & Scored]
A 2026 ranking puts GitLab, GitHub Advanced Security, and Snyk atop DevSecOps platforms by developer fix rates.
22
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Wiz promotes ASPM connectors that centralize scanner findings and prioritize exploitable application risks.
22
Fake AI Tools Put US Companies at Risk: Inside Counterfeit Claude, ChatGPT, and Copilot
ANY.RUN linked 1,258 fake Claude and ChatGPT lures delivering infostealers and phishing US users.
67
GitHub’s model for secret detection: Finding more secrets with less noise
GitHub's ModernBERT secret classifier raised alert acceptance 11.5% and cut median scan time by 86%.
48
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub expires unused npm trusted-publisher configs after 48 hours following a slug-reuse flaw affecting 1,500-plus packages.
76
Over 1,500 npm packages exposed by Trusted Publishing validation flaw
A now-fixed npm Trusted Publishing flaw exposed over 1,500 packages to repository-name hijacks.
74
Incident with Actions, Pull Requests and Issues
GitHub mitigated degraded Actions, Issues, and Pull Requests, with notification delays still being fixed.
7
GhostAction Hackers Compromise 500+ GitHub Accounts to Steal Cloud and AI API Credentials
GhostAction compromised 500-plus GitHub accounts and planted workflows that steal cloud and AI API credentials.
80
Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories
GhostAction compromised maintainer accounts to plant credential-stealing GitHub Actions workflows in tens of thousands of repositories.
82
New GhostAction Attack Compromises Hundreds of GitHub Repos to Steal Secrets
GhostAction hit 346 GitHub repositories, including Uber's, with malicious Actions workflows that stole CI secrets.
82
Related CVEs
by mentions- CVE-2026-453213%9.6Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages
- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
- CVE-2023-20198100%10.0Unauthenticated Privilege Escalation in Cisco IOS XE Web UI (Actively Exploited)
- CVE-2026-4227191%8.7Command Injection in BerriAI LiteLLM AI Gateway Exploited in the Wild
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-4871070%6.5HTTP Request Smuggling in Kludex Starlette (CVE-2026-48710)
- CVE-2026-71963<1%8.6Command injection RCE in Hermes Agent via malicious .git/config
- CVE-2022-24346<1%7.8In JetBrains IntelliJ IDEA before 2021.3.1, local code execution via RLO (Right-to-Left Override) characters was possible
- CVE-2026-19592<1%7.3Unsandboxed attacker code execution in OpenAI Codex via malicious Git core.fsmonitor
- CVE-2026-35603<1%5.4Claude Code: Claude Code loaded the system-wide default configuration from C:\ProgramData\ClaudeCode\managed-settings.json without validating…
Appears with
- GitHuborganization · 49
- Microsoftvendor · 34
- GitHub Actionsproduct · 31
- OpenAIvendor · 27
- GitHub Copilotproduct · 25
- Anthropicvendor · 21
- GitHubproduct · 21
- npmproduct · 19
- Googlevendor · 17
- Codexproduct · 15
- GitGuardianorganization · 13
- Claude Codeproduct · 13
- Socketorganization · 11
- Shai-Huludmalware · 10
- GitHub Enterprise Serverproduct · 10
- Amazon Web Servicesvendor · 10
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.