CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.
In GitHub and GitHub Enterprise Server, attackers with push rights to repositories can inject malicious code. Updates fix ...
Wiz used an AI reverse-engineering tool to pinpoint a vulnerability that previously would have been too costly and ...
Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...
Breakdown of the Trivy GitHub Actions attack, including workflow misconfigurations, token theft, and supply chain exposure.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results