Composer vulnerability leaks GitHub tokens, threatens PHP supply chainSansec (Magento / e-commerce security)·May 13, 14:54 UTC · May 13, 2026Vulnerability155
GitHub CISO on security strategy and collaborating with the open-source communityHelp Net Security·Jan 13, 00:00 UTC · Jan 13, 2025Vulnerability55
Most GitHub Actions workflows are insecure in some wayHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2024Vulnerability155
CVE-2026-3854 GitHub flaw enables remote code executionSecurity Affairs·Apr 28, 20:44 UTC · Apr 28, 2026VulnerabilityCVE-2026-385460
GitHub fixed a new critical flaw in the GitHub Enterprise ServerSecurity Affairs·Aug 22, 07:08 UTC · Aug 22, 2024VulnerabilityCVE-2024-6800CVE-2024-7711CVE-2024-6337+1 CVEs160
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP TierThe Hacker News·Jul 23, 04:14 UTC · Jul 23, 2026Vulnerability55
GitHub flaw could have allowed attackers to takeover repositories of other usersSecurity Affairs·Oct 31, 12:11 UTC · Oct 31, 2022Vulnerability55
GitHub envisions a world with fewer software vulnerabilitiesHelp Net Security·Oct 13, 00:00 UTC · Oct 13, 2020Vulnerability55
GitHub Security Lab aims to make open source software more secureHelp Net Security·May 28, 10:00 UTC · May 28, 2020Vulnerability255
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git PushThe Hacker News·Apr 28, 18:19 UTC · Apr 28, 2026VulnerabilityCVE-2026-3854160
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)Help Net Security·Jun 11, 00:00 UTC · Jun 11, 2024Vulnerability in the wildCVE-2024-3705160
GitHub addressed a critical vulnerability in Enterprise ServerSecurity Affairs·Oct 16, 06:45 UTC · Oct 16, 2024VulnerabilityCVE-2024-9487CVE-2024-4985CVE-2024-9539160
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160
GitHub Rotates Credentials and Patches New BugInfosecurity Magazine·Jan 17, 09:30 UTC · Jan 17, 2024Vulnerability155
Critical GitHub Enterprise Server Auth Bypass bug. Fix it now!Security Affairs·May 22, 10:05 UTC · May 22, 2024VulnerabilityCVE-2024-4985160
A new Repojacking attack exposed over 4,000 GitHub repositories to hackSecurity Affairs·Sep 12, 16:10 UTC · Sep 12, 2023Vulnerability55
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token VulnerabilityThe Hacker News·Mar 30, 18:05 UTC · Mar 30, 2026Vulnerability155
GitHub Rotates Keys After High-Severity Vulnerability Exposes CredentialsThe Hacker News·Jan 17, 10:00 UTC · Jan 17, 2024Vulnerability in the wildCVE-2024-0200CVE-2024-0507160
HackerOne integrates with GitHub to enable tracking and syncing of high-priority vulnerability reportsHelp Net Security·Jun 19, 00:00 UTC · Jun 19, 2021Vulnerability155
GitHub Fixes Maximum Severity Flaw in Enterprise ServerInfosecurity Magazine·May 23, 10:15 UTC · May 23, 2024VulnerabilityCVE-2024-4985160
GitHub fixes maximum severity Enterprise Server auth bypass bug (CVE-2024-4985)Help Net Security·May 23, 00:00 UTC · May 23, 2024VulnerabilityCVE-2024-4985160
GitHub adds Python support for security alertsHelp Net Security·Dec 15, 12:29 UTC · Dec 15, 2023Vulnerability55
Datadog and Snyk unveil GitHub integration to automate software development workflowHelp Net Security·Dec 14, 00:00 UTC · Dec 14, 2020Vulnerability155
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHubThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133CVE-2024-5555660
GitHub patches critical vulnerability in its Enterprise ServersCyberScoop·Oct 16, 20:24 UTC · Oct 16, 2024VulnerabilityCVE-2024-9487CVE-2024-4985CVE-2024-9539160
Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)Help Net Security·Aug 22, 00:00 UTC · Aug 22, 2024VulnerabilityCVE-2024-680060
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreThe Hacker News·May 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-31431CVE-2026-3854+2 CVEs60
Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential TheftThe Hacker News·Nov 25, 03:51 UTC · Nov 25, 2025Vulnerability55
Multiple Git flaws led to credentials compromiseSecurity Affairs·Jan 27, 14:36 UTC · Jan 27, 2025VulnerabilityCVE-2025-23040CVE-2024-53263CVE-2024-52006+1 CVEs60
GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance AccessThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024VulnerabilityCVE-2024-9487CVE-2024-4985CVE-2024-9539+1 CVEs60
GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin PrivilegesThe Hacker News·Aug 22, 04:48 UTC · Aug 22, 2024VulnerabilityCVE-2024-6800CVE-2024-7711CVE-2024-6337+1 CVEs160
Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking AttackThe Hacker News·Sep 12, 11:32 UTC · Sep 12, 2023Vulnerability55
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code ExecutionThe Hacker News·May 7, 13:06 UTC · May 7, 2026VulnerabilityCVE-2026-26268160
Are Your SaaS Backups as Secure as Your Production Data?The Hacker News·May 23, 11:14 UTC · May 23, 2024Vulnerability55
Critical GitHub Enterprise Server Flaw Allows Authentication BypassThe Hacker News·May 21, 16:16 UTC · May 21, 2024VulnerabilityCVE-2024-498560
Unpatched Travis CI API Bug Exposes Thousands of Secret User Access TokensThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2022Vulnerability155
A regular GitHub user accidentally triggered a flaw Ethereum Parity Wallet that locked up $280 million in EtherSecurity Affairs·Nov 8, 08:23 UTC · Nov 8, 2017Vulnerability55
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attackHelp Net Security·Jul 5, 00:00 UTC · Jul 5, 2026Vulnerability in the wildCVE-2026-12569CVE-2026-48558CVE-2026-4681760
Senator presses CISA for answers about alleged GitHub repository leakThe Record·May 20, 12:20 UTC · May 20, 2026Vulnerability55