Composer vulnerability leaks GitHub tokens, threatens PHP supply chainSansec (Magento / e-commerce security)·May 13, 14:54 UTC · May 13, 2026Vulnerability155
GitHub CISO on security strategy and collaborating with the open-source communityHelp Net Security·Jan 13, 00:00 UTC · Jan 13, 2025Vulnerability55
EtherRAT Distribution Spoofing Administrative Tools via GitHub FacadesThe Hacker News·Jun 7, 15:47 UTC · Jun 7, 2026Malware155
Most GitHub Actions workflows are insecure in some wayHelp Net Security·Jul 17, 00:00 UTC · Jul 17, 2024Vulnerability155
CVE-2026-3854 GitHub flaw enables remote code executionSecurity Affairs·Apr 28, 20:44 UTC · Apr 28, 2026VulnerabilityCVE-2026-385460
GitHub fixed a new critical flaw in the GitHub Enterprise ServerSecurity Affairs·Aug 22, 07:08 UTC · Aug 22, 2024VulnerabilityCVE-2024-6800CVE-2024-7711CVE-2024-6337+1 CVEs160
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP TierThe Hacker News·Jul 23, 04:14 UTC · Jul 23, 2026Vulnerability55
GitHub flaw could have allowed attackers to takeover repositories of other usersSecurity Affairs·Oct 31, 12:11 UTC · Oct 31, 2022Vulnerability55
GitHub envisions a world with fewer software vulnerabilitiesHelp Net Security·Oct 13, 00:00 UTC · Oct 13, 2020Vulnerability55
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain AttacksThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild60
GitHub's new tool helps prevent costly open-source license violationsHelp Net Security·Jul 2, 00:00 UTC · Jul 2, 2026Tools55
GitHub Security Lab aims to make open source software more secureHelp Net Security·May 28, 10:00 UTC · May 28, 2020Vulnerability255
GitHub Breach Traced to Malicious ‘Nx Console’ VS Code ExtensionInfosecurity Magazine·May 21, 14:45 UTC · May 21, 2026Data breachCVE-2026-48027160
Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git PushThe Hacker News·Apr 28, 18:19 UTC · Apr 28, 2026VulnerabilityCVE-2026-3854160
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)Help Net Security·Jun 11, 00:00 UTC · Jun 11, 2024Vulnerability in the wildCVE-2024-3705160
GitHub addressed a critical vulnerability in Enterprise ServerSecurity Affairs·Oct 16, 06:45 UTC · Oct 16, 2024VulnerabilityCVE-2024-9487CVE-2024-4985CVE-2024-953960
Veza integrates with GitHub to secure customers’ dataHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2023Data breach160
The Trojan horse of cybercrime: Weaponizing SaaS notification pipelinesCisco Talos·Apr 7, 10:00 UTC · Apr 7, 2026Malware55
GitHub rolls out new token scanning, security alert featuresCyberScoop·Oct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild60
GitHub says internal repositories were impacted in poisoned VS Code extension attackCyberScoop·May 20, 16:59 UTC · May 20, 2026Ransomware60
TeamPCP breached GitHub's internal codebase via poisoned VS Code extensionHelp Net Security·May 20, 00:00 UTC · May 20, 2026Data breach60
GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 RepositoriesThe Hacker News·Mar 18, 04:03 UTC · Mar 18, 2025VulnerabilityCVE-2025-30066CVE-2023-49291160
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokensSecurity Affairs·Jun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-37051160
GitHub Rotates Credentials and Patches New BugInfosecurity Magazine·Jan 17, 09:30 UTC · Jan 17, 2024Vulnerability155
Lawmakers Demand Answers as CISA Tries to Contain Data LeakKrebs on Security·May 22, 17:52 UTC · May 22, 2026Policy & legal55
GitHub Confirms Breach of Internal RepositoriesInfosecurity Magazine·May 20, 10:45 UTC · May 20, 2026Ransomware60
Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to riseHelp Net Security·Aug 7, 00:00 UTC · Aug 7, 2024RansomwareCVE-2021-22205160
Critical GitHub Enterprise Server Auth Bypass bug. Fix it now!Security Affairs·May 22, 10:05 UTC · May 22, 2024VulnerabilityCVE-2024-4985160
A new Repojacking attack exposed over 4,000 GitHub repositories to hackSecurity Affairs·Sep 12, 16:10 UTC · Sep 12, 2023Vulnerability55
Hackers create fake GitHub profiles to deliver malware through repositoriesThe Record·Jun 14, 17:37 UTC · Jun 14, 2023Malware55
GitHub revamps bug bounty program with new VIP tier, payout changesHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Exploit / PoC160
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token VulnerabilityThe Hacker News·Mar 30, 18:05 UTC · Mar 30, 2026Vulnerability55
GitHub Rotates Keys After High-Severity Vulnerability Exposes CredentialsThe Hacker News·Jan 17, 10:00 UTC · Jan 17, 2024Vulnerability in the wildCVE-2024-0200CVE-2024-0507160
Google open-sourced Allstar tool to secure GitHub repositoriesSecurity Affairs·Aug 13, 08:08 UTC · Aug 13, 2021Industry55
HackerOne integrates with GitHub to enable tracking and syncing of high-priority vulnerability reportsHelp Net Security·Jun 19, 00:00 UTC · Jun 19, 2021Vulnerability155
GitHub Updates Policy to Remove Exploit Code When Used in Active AttacksThe Hacker News·Jun 5, 17:01 UTC · Jun 5, 2021Exploit / PoC in the wild60
Magecart skimmer scripts hosted on GitHub infected 200+ sitesSecurity Affairs·Apr 27, 14:34 UTC · Apr 27, 2019Malware55
GitHub Internal Repositories Breached via Malicious Nx Console VS Code ExtensionThe Hacker News·May 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321CVE-2026-4802760