Application security Archives
…Top security researcher shares their bug bounty process For this year’s Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to put the spotlight on a talented security researcher—André…
Search
Related topics:
GitHub
All sources
bleepingcomputer.com
31
techcrunch.com
25
github.blog
10
hothardware.com
9
developer.nvidia.com
7
wired.com
6
theregister.com
5
tomshardware.com
5
xda-developers.com
5
windowscentral.com
4
theverge.com
3
neowin.net
3
Videos
More videos
Github got Hacked by CATS
You NEED to try these 12 open-source AI projects RIGHT NOW
His Windows PC Testified Against Him #cybersecurity #privacy
HUGE npm axios supply chain attack
The Supply Chain Attacks All Have One Thing in Common. It's GitHub.
Before You Trust Another Self-Hosted App, Watch This
Hackers make FAKE notifications
It's Bigger Than TeamPCP. Open Source Is Under Siege.
Top stories
Supply chain security Archives
…Latest Top security researcher shares their bug bounty process For this year’s Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to put the spotlight on a talented security researcher…
Malicious VS Code Extension Linked to Theft of 3,800 GitHub Repositories
…According to published reports, a hacker group known as TeamPCP claims it gained access to approximately 3,800 internal GitHub repositories after an employee installed a compromised VS Code plugin. The attackers…
GitHub investigates internal repositories breach claimed by TeamPCP
…TanStack supply chain attack Breach Cybercrime Data Theft GitHub TeamPCP Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email or…
Discussions and forums
‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub — Gizmodo
‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub - Gizmodo
1-Click GitHub Token Stealing via a VSCode Bug
1-Click GitHub Token Stealing via a VSCode Bug
A new GitHub attack dubbed Megalodon compromised more than 5.5K repositories
A new GitHub attack dubbed Megalodon compromised more than 5.5K repositories
GitHub bans vindictive security researcher dropping Windows zero-days: “I will make sure your bones are shattered”
https://cybernews.com/security/github-bans-researcher-releasing-windows-zero-days/
GitHub hit by a compromised VSCode extension
GitHub’s internal repositories were breached by a malicious VSCode extension: https://xcancel.com/github/status/2056949168208552080 Microsoft closed an earlier request for update cooldowns as not planned but hopefully th…
BioShocking Attack Uses Fake Games To Hijack AI Browsers And Leak Data
…These include a recent ChatGPT Atlas exploit and Mozilla's recent disclosure of GitHub repos with disguised prompt injection malware. LayerX's proof of concept also worked on ChatGPT Atlas, Perplexity AI…
YellowKey Tool Bypasses Windows 11 BitLocker Using Only a USB Stick
YellowKey Tool Bypasses Windows 11 BitLocker Using Only a USB Stick by Chris Harper — Thursday, May 14, 2026, 02:51 PM EDT Nightmare-Eclipse, a cybersecurity researcher previously known for a controversial…
GitHub confirms breach of 3,800 repos via malicious VSCode extension
…chain attack Breach Cybercrime Data Theft Extensions GitHub TeamPCP VS Code Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity and technology developments for over a decade. Email…
GitHub: We going to train on your data after all
Devops GitHub hits CTRL-Z, decides it will train its AI with user data after all As of April 24 you'll be feeding the Octocat unless you opt out Microsoft's…
Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges
…customers," leading many in the cybersecurity community to think Microsoft was threatening the researcher. Nightmare Eclipse claims Microsoft repeatedly targeted and removed previous repositories hosted on GitHub and GitLab, prompting the creation…
Path traversal flaw in AI dev platform Langflow exploited in attacks
…AI development teams widely use the project, and it has accumulated more than 149,000 stars and 9,200 forks on GitHub . CVE-2026-5027 is a high-severity path traversal flaw…