AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain AttacksThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wild60
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)Help Net Security·Jun 11, 00:00 UTC · Jun 11, 2024Vulnerability in the wildCVE-2024-3705160
GitHub rolls out new token scanning, security alert featuresCyberScoop·Oct 17, 20:26 UTC · Oct 17, 2018Exploit / PoC in the wild60
JetBrains fixed IntelliJ IDE flaw exposing GitHub access tokensSecurity Affairs·Jun 12, 10:24 UTC · Jun 12, 2024Exploit / PoC in the wildCVE-2024-37051160
GitHub Rotates Keys After High-Severity Vulnerability Exposes CredentialsThe Hacker News·Jan 17, 10:00 UTC · Jan 17, 2024Vulnerability in the wildCVE-2024-0200CVE-2024-0507160
GitHub Updates Policy to Remove Exploit Code When Used in Active AttacksThe Hacker News·Jun 5, 17:01 UTC · Jun 5, 2021Exploit / PoC in the wild60
GitHub Internal Repositories Breached via Malicious Nx Console VS Code ExtensionThe Hacker News·May 28, 05:34 UTC · May 28, 2026Data breach in the wildCVE-2026-45321CVE-2026-4802760
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2025-30066CVE-2024-5559160
GitHub Token Leak Exposes Python's Core Repositories to Potential AttacksThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2024Exploit / PoC in the wild160
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHubThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133CVE-2024-5555660
GitHub removes researcher's Exchange Server exploit, sparking industry debateCyberScoop·Mar 11, 21:25 UTC · Mar 11, 2021Exploit / PoC in the wild60
GitHub hit with record 1.35-Tbps denial of service attack, more attacks expectedCyberScoop·Mar 1, 19:17 UTC · Mar 1, 2018Exploit / PoC in the wild160
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreThe Hacker News·May 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-31431CVE-2026-3854+2 CVEs60
How GitHub untangled itself from the ‘Octopus’ malware that infected 26 software projectsCyberScoop·May 29, 19:51 UTC · May 29, 2020Malware in the wild160
More evidence your AI agents can be turned against youCyberScoop·Dec 5, 20:48 UTC · Dec 5, 2025Exploit / PoC in the wild60
GitHub Revoked Insecure SSH Keys Generated by a Popular git ClientThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2021Exploit / PoC in the wildCVE-2021-4111760
Researcher Explains Release of Undisclosed ZeroInfosecurity Magazine·Jul 2, 12:51 UTC · Jul 2, 2026Exploit / PoC in the wildCVE-2026-55200CVE-2026-58049CVE-2026-58050+10 CVEs160
DarkSword's GitHub leak threatens to turn elite iPhone hacking into a tool for the massesCyberScoop·Mar 24, 21:34 UTC · Mar 24, 2026Exploit / PoC in the wild160
Week in review: Salesloft Drift breach investigation results, malicious GitHub Desktop installersHelp Net Security·Sep 14, 00:00 UTC · Sep 14, 2025Ransomware in the wildCVE-2024-4076660
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attackHelp Net Security·Jul 5, 00:00 UTC · Jul 5, 2026Vulnerability in the wildCVE-2026-12569CVE-2026-48558CVE-2026-4681760
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account RemovalThe Hacker News·May 29, 05:43 UTC · May 29, 2026Exploit / PoC in the wildCVE-2026-33825CVE-2026-41091CVE-2026-45498+1 CVEs60
Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploitedHelp Net Security·May 24, 00:00 UTC · May 24, 2026Data breach in the wildCVE-2026-42945CVE-2026-45585CVE-2026-41091+1 CVEs60
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
CodeBuild Flaw Put AWS Console Supply Chain At RiskInfosecurity Magazine·Jan 15, 15:00 UTC · Jan 15, 2026Vulnerability in the wild160
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Salesloft Drift security incident started with undetected GitHub accessCyberScoop·Sep 8, 22:44 UTC · Sep 8, 2025Exploit / PoC in the wild60
Clues to the alleged Capital One hacker's crimes were all over the internetCyberScoop·Jul 30, 15:25 UTC · Jul 30, 2019Exploit / PoC in the wild60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for monthsHelp Net Security·May 3, 00:00 UTC · May 3, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513+3 CVEs260
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
Shai-Hulud worm returns stronger and more automated than ever beforeCyberScoop·Nov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild60
BreachLock Attack Surface Analytics strengthens enterprise CTEM capabilitiesHelp Net Security·Oct 8, 00:00 UTC · Oct 8, 2024Vulnerability in the wild60
Hackers turn open-source AI framework into global cryptojacking operationCyberScoop·Nov 19, 15:29 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2023-48022160
May 2026 CVE LandscapeRecorded Future·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250CVE-2009-1537CVE-2009-3459+19 CVEs60
Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure ProcessSecurity Affairs·Jun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild160
Less panic patching, more precisionCisco Talos·May 28, 18:00 UTC · May 28, 2026Exploit / PoC in the wild60
CISA credential leak raises alarms, and Capitol Hill demands answersCyberScoop·May 20, 14:43 UTC · May 20, 2026Exploit / PoC in the wild60
Mini Shai-Hulud returns, compromising hundreds of npm packagesCyberScoop·May 19, 21:21 UTC · May 19, 2026Data breach in the wild60
AI might cut false positives, but it won’t stop the slopCyberScoop·May 18, 20:45 UTC · May 18, 2026Exploit / PoC in the wild60