#webhooks

0 stories this week · 8 this month · 9 in 6 months · mostly security

Stories per day · 30 days

8 stories, newest first · one card per story

Root-cause investigation continues after errors also hit code search and live updates.

Empty webhook secrets accept forgeries, and unsigned legacy payloads can exhaust memory before verification.

Logged-in attackers can make the server send arbitrary requests; versions and a fix are not given.

In a 12-week review, 76% of enabled agents had not run in 60 days and 22.9% had an unsecured trigger.

In Arrakis customer telemetry, 24% of dormant agents can be started by an unsigned external webhook.

GitHub says event-streaming hotspots are still slowing pull request updates, webhook deliveries, and audit log events.

GitHub said customers may see delays in workflow runs, site builds, and webhook delivery while it investigates.

HuntressAug 31, 2026

Huntress expanded its API from six read-only endpoints into an automation platform adding webhooks and Model Context Protocol support.

Stories tagged #webhooks