Search: “github”

1,254 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 427 Vulnerability 265 Ransomware 214 Data breach 122 Threat actor 93 Malware 79 AI safety & security 13 Advisory 11 Model release 10 Phishing & fraud 10 Policy & legal 9 AI industry 3 Research 3 AI tools & infra 2

SeverityAll critical 1036 high 183 medium 21 low 0 info 21

CVE-2026-3854 GitHub flaw enables remote code execution

Security AffairsApr 28, 20:44 UTC · Apr 28, 2026Vulnerability CVE-2026-3854

60

GitHub fixed a new critical flaw in the GitHub Enterprise Server

Security AffairsAug 22, 07:08 UTC · Aug 22, 2024Vulnerability CVE-2024-6800 CVE-2024-7711 CVE-2024-6337+1 CVEs1

60

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

The Hacker NewsJul 23, 11:28 UTC · Jul 23, 2026Data breach CVE-2026-419401

60

GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal Repos

The Hacker NewsMay 20, 16:10 UTC · May 20, 2026Data breach

60

AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild

60

GitHub Breach Traced to Malicious ‘Nx Console’ VS Code Extension

Infosecurity MagazineMay 21, 14:45 UTC · May 21, 2026Data breach CVE-2026-480271

60

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

The Hacker NewsApr 28, 18:19 UTC · Apr 28, 2026Vulnerability CVE-2026-38541

60

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

Help Net SecurityJun 11, 00:00 UTC · Jun 11, 2024Vulnerability in the wildCVE-2024-37051

60

Tj-actions Supply Chain Attack Traced Back to GitHub Token Compromise

Infosecurity MagazineApr 4, 12:00 UTC · Apr 4, 2025Exploit / PoC in the wildCVE-2025-30066

60

GitHub addressed a critical vulnerability in Enterprise Server

Security AffairsOct 16, 06:45 UTC · Oct 16, 2024Vulnerability CVE-2024-9487 CVE-2024-4985 CVE-2024-9539

60

Veza integrates with GitHub to secure customers’ data

Help Net SecurityFeb 10, 00:00 UTC · Feb 10, 2023Data breach1

60

GitHub rolls out new token scanning, security alert features

CyberScoopOct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild

60

GitHub says internal repositories were impacted in poisoned VS Code extension attack

CyberScoopMay 20, 16:59 UTC · May 20, 2026Ransomware

60

TeamPCP breached GitHub's internal codebase via poisoned VS Code extension

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Data breach

60

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

The Hacker NewsMar 18, 04:03 UTC · Mar 18, 2025Vulnerability CVE-2025-30066 CVE-2023-492911

60

There is no real fix to the security issues recently found in GitHub and other similar software

Cisco TalosAug 1, 18:00 UTC · Aug 1, 2024Ransomware CVE-2018-0824

60

JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokens

Security AffairsJun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-370511

60

GitHub Confirms Breach of Internal Repositories

Infosecurity MagazineMay 20, 10:45 UTC · May 20, 2026Ransomware

60

TeamPCP Hacks Checkmarx GitHub Actions Using Stolen CI Credentials

The Hacker NewsMar 25, 06:34 UTC · Mar 25, 2026Data breach CVE-2026-33634

60

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

Help Net SecurityAug 7, 00:00 UTC · Aug 7, 2024Ransomware CVE-2021-222051

60

Critical GitHub Enterprise Server Auth Bypass bug. Fix it now!

Security AffairsMay 22, 10:05 UTC · May 22, 2024Vulnerability CVE-2024-49851

60

GitHub revamps bug bounty program with new VIP tier, payout changes

Help Net SecurityJul 23, 00:00 UTC · Jul 23, 2026Exploit / PoC1

60

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

The Hacker NewsMar 19, 06:31 UTC · Mar 19, 2025Advisory in the wildCVE-2025-30066

60

GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials

The Hacker NewsJan 17, 10:00 UTC · Jan 17, 2024Vulnerability in the wildCVE-2024-0200 CVE-2024-05071

60

GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks

The Hacker NewsJun 5, 17:01 UTC · Jun 5, 2021Exploit / PoC in the wild

60

GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension

The Hacker NewsMay 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321 CVE-2026-48027

60

U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472 CVE-2025-30066 CVE-2024-55591

60

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild1

60

GitHub Fixes Maximum Severity Flaw in Enterprise Server

Infosecurity MagazineMay 23, 10:15 UTC · May 23, 2024Vulnerability CVE-2024-49851

60

GitHub fixes maximum severity Enterprise Server auth bypass bug (CVE-2024-4985)

Help Net SecurityMay 23, 00:00 UTC · May 23, 2024Vulnerability CVE-2024-49851

60

Malicious Actors Exploit GitHub to Distribute Fake Exploits

Infosecurity MagazineJun 14, 17:00 UTC · Jun 14, 2023Exploit / PoC

60

Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

Wiz's AI agent uncovered a critical flaw in Snowflake's GitHub Actions workflow that GitHub Advanced Security scans had missed.

A Wiz researcher, using the company's AI security agent, discovered a critical security flaw in Snowflake's GitHub Actions workflow. The flaw had been missed by a GitHub Advanced Security scan, highlighting gaps in automated coverage for CI/CD pipelines. No CVE identifier or evidence of active exploitation was provided in the report.

Infosecurity MagazineAug 18, 15:30 UTC · 28d agoVulnerability

60

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

The Hacker NewsAug 5, 10:35 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2025-68613

60

SAP-Related npm Packages Compromised in Credential

The Hacker NewsApr 30, 16:39 UTC · Apr 30, 2026Data breach

60

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

The Hacker NewsMar 25, 14:32 UTC · Mar 25, 2026Malware CVE-2026-336341

60

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133 CVE-2024-55556

60

GitHub patches critical vulnerability in its Enterprise Servers

CyberScoopOct 16, 20:24 UTC · Oct 16, 2024Vulnerability CVE-2024-9487 CVE-2024-4985 CVE-2024-9539

60

Critical GitHub Enterprise Server auth bypass flaw fixed (CVE-2024-6800)

Help Net SecurityAug 22, 00:00 UTC · Aug 22, 2024Vulnerability CVE-2024-6800

60

GitHub removes researcher's Exchange Server exploit, sparking industry debate

CyberScoopMar 11, 21:25 UTC · Mar 11, 2021Exploit / PoC in the wild

60

GitHub hit with record 1.35-Tbps denial of service attack, more attacks expected

CyberScoopMar 1, 19:17 UTC · Mar 1, 2018Exploit / PoC in the wild1

60