Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo DataThe Hacker News·Jul 7, 14:07 UTC · Jul 7, 2026Exploit / PoC145
GitHub to review its exploit-hosting policy in light of recent scandalThe Record·Dec 7, 00:00 UTC · Dec 7, 2022Exploit / PoC45
AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain AttacksThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild60
Tj-actions Supply Chain Attack Traced Back to GitHub Token CompromiseInfosecurity Magazine·Apr 4, 12:00 UTC · Apr 4, 2025Exploit / PoC in the wildCVE-2025-3006660
GitHub rolls out new token scanning, security alert featuresCyberScoop·Oct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild60
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokensSecurity Affairs·Jun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-37051160
GitHub revamps bug bounty program with new VIP tier, payout changesHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Exploit / PoC160
390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC ExploitsThe Hacker News·Dec 17, 04:40 UTC · Dec 17, 2024Exploit / PoC57
How to abuse GitHub Codespaces to deliver malicious contentSecurity Affairs·Jan 17, 15:41 UTC · Jan 17, 2023Exploit / PoC45
GitHub Updates Policy to Remove Exploit Code When Used in Active AttacksThe Hacker News·Jun 5, 17:01 UTC · Jun 5, 2021Exploit / PoC in the wild60
Researcher discovered 2 security issues in GITHUB platformSecurity Affairs·Apr 1, 11:12 UTC · Apr 1, 2015Exploit / PoC45
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2025-30066CVE-2024-5559160
GitHub Token Leak Exposes Python's Core Repositories to Potential AttacksThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild160
Malicious Actors Exploit GitHub to Distribute Fake ExploitsInfosecurity Magazine·Jun 14, 17:00 UTC · Jun 14, 2023Exploit / PoC60
Security experts targeted with malicious CVE PoC exploits on GitHubSecurity Affairs·Oct 24, 07:24 UTC · Oct 24, 2022Exploit / PoCCVE-2019-070850
Leaked n8n API Tokens Exposed Live Instances to Credential TheftThe Hacker News·Aug 5, 10:35 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2025-6861360
GitHub removes researcher's Exchange Server exploit, sparking industry debateCyberScoop·Mar 11, 21:25 UTC · Mar 11, 2021Exploit / PoC in the wild60
GitHub hit with record 1.35-Tbps denial of service attack, more attacks expectedCyberScoop·Mar 1, 19:17 UTC · Mar 1, 2018Exploit / PoC in the wild160
More evidence your AI agents can be turned against youCyberScoop·Dec 5, 20:48 UTC · Dec 5, 2025Exploit / PoC in the wild60
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged AgentThe Hacker News·Aug 4, 11:16 UTC · Aug 4, 2026Exploit / PoC in the wild60
U.S. CISA adds Sitecore CMS and XP, and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 27, 12:31 UTC · Mar 27, 2025Exploit / PoC in the wildCVE-2019-9875CVE-2019-9874CVE-2025-3015460
GitHub Revoked Insecure SSH Keys Generated by a Popular git ClientThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2021Exploit / PoC in the wildCVE-2021-4111760
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow SecretsThe Hacker News·Aug 7, 08:18 UTC · Aug 7, 2026Exploit / PoC in the wildCVE-2026-12537CVE-2026-54316160
Researcher Explains Release of Undisclosed ZeroInfosecurity Magazine·Jul 2, 12:51 UTC · Jul 2, 2026Exploit / PoC in the wildCVE-2026-55200CVE-2026-58049CVE-2026-58050+10 CVEs160
DarkSword's GitHub leak threatens to turn elite iPhone hacking into a tool for the massesCyberScoop·Mar 24, 21:34 UTC · Mar 24, 2026Exploit / PoC in the wild160
Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to MalwareThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Exploit / PoCCVE-2023-35829CVE-2023-2087160
Apple's iBoot Source Code for iPhone Leaked on GithubThe Hacker News·Feb 8, 08:55 UTC · Feb 8, 2018Exploit / PoC160
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account RemovalThe Hacker News·May 29, 05:43 UTC · May 29, 2026Exploit / PoC in the wildCVE-2026-33825CVE-2026-41091CVE-2026-45498+1 CVEs60
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
Salesloft Drift security incident started with undetected GitHub accessCyberScoop·Sep 8, 22:44 UTC · Sep 8, 2025Exploit / PoC in the wild60
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC ExploitsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Exploit / PoC60
Clues to the alleged Capital One hacker's crimes were all over the internetCyberScoop·Jul 30, 15:25 UTC · Jul 30, 2019Exploit / PoC in the wild60
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker CommandsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Exploit / PoCCVE-2025-32711150
AI is drowning software maintainers in junk security reportsHelp Net Security·May 18, 00:00 UTC · May 18, 2026Exploit / PoC60
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
20 cybersecurity projects on GitHub you should check outHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2023Exploit / PoC45
Hackers turn open-source AI framework into global cryptojacking operationCyberScoop·Nov 19, 15:29 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2023-48022160
Dangling Domains: Security Threats, Detection and PrevalencePalo Alto Unit 42·Jun 6, 01:30 UTC · Jun 6, 2024Exploit / PoC45
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60