LIVE · cybersecurity feed
Live wire
ASOS Breach Reveals the Risks in Customer-Facing SaaSUnpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoAI Training Critical as Governance Challenges GrowUS Disrupts Chinese State-Sponsored Hacking ToolsCitrix warns admins to patch new NetScaler RCE flaw immediatelyCisco Patches a Dozen Critical VulnerabilitiesCisco warns of critical flaws allowing Nexus switch takeoverCVE-2026-21589 · Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)Cyber experts call on CISA to create mandatory federal OT rulesGremlin Foresight AI finds system weaknesses and verifies the fixes
vendor

Github

6 CVEs published in the last four months and 12 stories. Exploited flaws first.

Critical1
High5
Medium0
Exploited (KEV)0

All recent CVEs

CVECVSSSeverityProductSummaryPublished
CVE-2026-175569.1criticalenterprise serverA path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker81d ago
CVE-2026-93128.2highenterprise serverA server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an unaut152d ago
CVE-2026-450337.8highcopilot-cliGitHub Copilot CLI brings AI-powered coding assistance directly to your command line.165d ago
CVE-2026-474277.5highmcp serverGitHub MCP Server is GitHub's official MCP Server.89d ago
CVE-2026-159967.5highenterprise serverA denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attac81d ago
CVE-2026-485017.4highcliGitHub CLI (gh) is GitHub’s official command line tool.149d ago

Filter the full tracker by Github →

Our coverage of Github

security

Credential-Stealing GitHub Actions Workflows Planted in Tens of Thousands of Repositories

Cybersecurity researchers have reported an active credential-theft campaign leveraging GitHub Actions workflows, which has led to the compromise of tens of thousands of repositories. The campaign reportedly exploited two high-profile open-source maintainer accounts to propagate a malicious workflow into over 340 repositories directly. One notable instance involved the account of Takashi Kitao,…

breach

Over 543,000 valid credentials exposed in public GitHub repositories

More than 543,000 valid credentials were found exposed in public GitHub repositories as of July 2026, despite the platform's security measures designed to prevent such leaks. Research conducted by Truffle Security, based on a dataset assembled for training large language models from a crawl that concluded on August 7, 2025, revealed that the median duration a unique credential remained…

nation-state

CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories

CrowdSec has reported that an attack involving the compromise of TanStack's npm packages led to the unauthorized copying of approximately 170 of its private GitHub repositories. The incident, which occurred on May 22, was attributed to the compromise of a former employee's laptop. CrowdSec, a French security company, stated that the employee's GitHub access remained active following their…

breach

Hardcoded MCP credentials found in public GitHub files

Hardcoded credentials for AI coding tools have been discovered in publicly accessible configuration files on GitHub, potentially exposing sensitive access tokens and API keys. The findings come from a recent analysis of approximately 82,000 configuration files, revealing that 12% of credential slots contained a hardcoded literal.

vulnerability

In Other News: Zombie Card Attack, T-Mobile Cut Cable to Stop Hackers, GitHub Denies AI Caused Bug

A recent report highlighted several security incidents and developments, including a "Zombie Card" attack, a distributed denial-of-service (DDoS) attack against Threema, and the emergence of the Evooo1Bot Linux botnet. Additionally, T-Mobile reportedly severed a cable in an attempt to thwart attackers, while GitHub denied that artificial intelligence was responsible for a specific bug.…

vulnerabilitycritical

Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed

Security researchers at Wiz, a cloud security company, have identified a critical script injection vulnerability in a public GitHub repository maintained by Snowflake. The flaw, found in the `snowflakedb/snowflake-connector-net` repository, specifically affected its GitHub Actions workflows.

snowflakehigh

Snowflake GitHub Actions Flaw Allows Command Injection

A recently disclosed vulnerability in Snowflake's GitHub Actions workflows could allow for command injection, according to researchers. The flaw, identified within the snowflakedb/snowflake-connector-net repository, reportedly enables the execution of arbitrary commands within a workflow through the submission of a specially crafted GitHub issue.

security

Microsoft confirms GitHub is down worldwide

GitHub is experiencing a widespread outage affecting numerous services, including its website, API, Actions, and Pull Requests, which began on August 17, 2026. The company confirmed the incident at 9:40 AM EDT, stating it was investigating performance issues.

patch

Mozilla revokes Firefox signing key after unencrypted copy lands in GitHub

Mozilla has revoked a cryptographic key used to sign releases of its Firefox browser and Thunderbird email client after an unencrypted copy of the private key was inadvertently committed to a GitHub repository. The company confirmed the incident on Monday, stating that the GPG private subkey was placed in a private GitHub repository accessible to a limited number of Mozilla employees, all of…

malware

GitHub Dependabot malware alerts now cover eight ecosystems

GitHub's Dependabot malware alert system has expanded its coverage from a single ecosystem, npm, to include seven additional package ecosystems: PyPI, Maven, RubyGems, NuGet, Go, crates.io, and PHP Composer. This enhancement, which became active in August 2026, allows Dependabot to issue malware alerts for packages across all eight supported ecosystems, provided users enable the feature.

CVE-2026-12537critical

Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

Recent reports indicate that researchers have uncovered critical vulnerabilities within Anthropic's Claude Code and Google's Gemini CLI tools. These flaws reportedly enabled unprivileged attackers to achieve code execution on Continuous Integration (CI) runners. The vulnerabilities have since been patched by the respective vendors and assigned CVE identifiers, though the specific CVEs were not…

malware

FakeGit campaign uses 7,600 GitHub repos to push SmartLoader malware

A large-scale operation, dubbed "FakeGit" by researchers, has been observed distributing SmartLoader and StealC malware through approximately 7,600 malicious repositories hosted on GitHub. These repositories have collectively accumulated over 14 million download events.