AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain AttacksThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild60
Tj-actions Supply Chain Attack Traced Back to GitHub Token CompromiseInfosecurity Magazine·Apr 4, 12:00 UTC · Apr 4, 2025Exploit / PoC in the wildCVE-2025-3006660
GitHub rolls out new token scanning, security alert featuresCyberScoop·Oct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild60
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokensSecurity Affairs·Jun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-37051160
GitHub revamps bug bounty program with new VIP tier, payout changesHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Exploit / PoC160
GitHub Updates Policy to Remove Exploit Code When Used in Active AttacksThe Hacker News·Jun 5, 17:01 UTC · Jun 5, 2021Exploit / PoC in the wild60
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2025-30066CVE-2024-5559160
GitHub Token Leak Exposes Python's Core Repositories to Potential AttacksThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild160
Malicious Actors Exploit GitHub to Distribute Fake ExploitsInfosecurity Magazine·Jun 14, 17:00 UTC · Jun 14, 2023Exploit / PoC60
Leaked n8n API Tokens Exposed Live Instances to Credential TheftThe Hacker News·Aug 5, 10:35 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2025-6861360
GitHub removes researcher's Exchange Server exploit, sparking industry debateCyberScoop·Mar 11, 21:25 UTC · Mar 11, 2021Exploit / PoC in the wild60
GitHub hit with record 1.35-Tbps denial of service attack, more attacks expectedCyberScoop·Mar 1, 19:17 UTC · Mar 1, 2018Exploit / PoC in the wild160
More evidence your AI agents can be turned against youCyberScoop·Dec 5, 20:48 UTC · Dec 5, 2025Exploit / PoC in the wild60
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged AgentThe Hacker News·Aug 4, 11:16 UTC · Aug 4, 2026Exploit / PoC in the wild60
U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 27, 12:31 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2019-9875CVE-2019-9874CVE-2025-3015460
GitHub Revoked Insecure SSH Keys Generated by a Popular git ClientThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2021Exploit / PoC in the wildCVE-2021-4111760
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsThe Hacker News·Aug 7, 08:18 UTC · Aug 7, 2026Exploit / PoC in the wildCVE-2026-12537CVE-2026-54316160
Researcher Explains Release of Undisclosed ZeroInfosecurity Magazine·Jul 2, 12:51 UTC · Jul 2, 2026Exploit / PoC in the wildCVE-2026-55200CVE-2026-58049CVE-2026-58050+10 CVEs160
DarkSword's GitHub leak threatens to turn elite iPhone hacking into a tool for the massesCyberScoop·Mar 24, 21:34 UTC · Mar 24, 2026Exploit / PoC in the wild160
Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to MalwareThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Exploit / PoCCVE-2023-35829CVE-2023-2087160
Apple's iBoot Source Code for iPhone Leaked on GithubThe Hacker News·Feb 8, 08:55 UTC · Feb 8, 2018Exploit / PoC160
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account RemovalThe Hacker News·May 29, 05:43 UTC · May 29, 2026Exploit / PoC in the wildCVE-2026-33825CVE-2026-41091CVE-2026-45498+1 CVEs60
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
Salesloft Drift security incident started with undetected GitHub accessCyberScoop·Sep 8, 22:44 UTC · Sep 8, 2025Exploit / PoC in the wild60
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC ExploitsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Exploit / PoC60
Clues to the alleged Capital One hacker's crimes were all over the internetCyberScoop·Jul 30, 15:25 UTC · Jul 30, 2019Exploit / PoC in the wild60
AI is drowning software maintainers in junk security reportsHelp Net Security·May 18, 00:00 UTC · May 18, 2026Exploit / PoC60
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
Hackers turn open-source AI framework into global cryptojacking operationCyberScoop·Nov 19, 15:29 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2023-48022160
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60
⚡ Weekly Recap: Instagram Account Hacks, Android ZeroThe Hacker News·Jun 9, 05:53 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2025-48595CVE-2026-28318CVE-2026-39210+43 CVEs60
Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure ProcessSecurity Affairs·Jun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild160
Less panic patching, more precisionCisco Talos·May 28, 18:00 UTC · May 28, 2026Exploit / PoC in the wild60
CISA credential leak raises alarms, and Capitol Hill demands answersCyberScoop·May 20, 14:43 UTC · May 20, 2026Exploit / PoC in the wild60
AI might cut false positives, but it won’t stop the slopCyberScoop·May 18, 20:45 UTC · May 18, 2026Exploit / PoC in the wild60
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active AttacksThe Hacker News·Jan 13, 07:05 UTC · Jan 13, 2026Exploit / PoC in the wildCVE-2025-8110CVE-2024-5594760
The Bug That Won't Die: 10 Years of the Same MistakeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Exploit / PoCCVE-2025-55182CVE-2025-66478CVE-2015-485260
Log4Shell: How It’s Exploited and Mitigating DamageRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-4422860