GitHub Source Code Allegedly Up for Sale Again
The internal source code stolen from GitHub in May is allegedly back on the market, and…
Category
GitHub
Most GitHub Enterprise Servers Still Unpatched for New RCE
Nearly nine out of ten self-hosted GitHub Enterprise Server instances remain vulnerable to a critical remote…
Researcher Drops PoC for 1-Click GitHub Token Theft via VSCode Bug — Skips MSRC Entirely
Security researcher Ammar Askar has publicly released a fully working proof-of-concept (PoC) exploit that can steal…
Composer Bug Silently Dumped GitHub Tokens Into CI Logs — Patch Now
Millions of PHP developers who rely on Composer for dependency management were silently exposed to a…
A Single Git Push Was All It Took to Compromise GitHub — Millions of Repos Were Exposed
A critical vulnerability in GitHub’s internal infrastructure allowed any authenticated user to execute arbitrary commands on…
AI-Powered GitHub Bot Quietly Targeted 500+ Repositories for Three Weeks Before Anyone Noticed
A threat actor armed with AI-assisted automation spent three weeks silently probing open-source repositories before security…
Sha1-Hulud 2.0: Destructive Worm Hijacks 25,000+ GitHub Repos in Massive NPM Supply Chain Attack
Over 700 npm packages compromised as self-replicating malware targets developer credentials across Zapier, PostHog, Postman, and…
GhostAction Attack Exposes 3,325 Developer Secrets in Massive GitHub Supply Chain Breach
A supply chain attack dubbed “GhostAction” has compromised 327 GitHub users across 817 repositories, successfully exfiltrating…
Researcher Uncovers Critical Git Credential Theft Vulnerabilities
Critical security vulnerabilities in popular Git-related tools could allow attackers to steal user credentials, according to…