Curated security research, vulnerabilities, advisories and tools for practitioners.

#github

Security coverage tagged github.

1.

Version Control DFIR: a Cheatsheet to GitHub, GitLab, Bitbucket, and Azure DevOps

blog | 2026-08-27 12:00 | wiz.io | original ↗ | #cloud | #supply-chain | #gitlab

2.

How to Investigate GitHub PAT Compromise: Lessons From a Multi-Organization Campaign

blog | 2026-08-13 15:04 | wiz.io | original ↗ | #cloud | #incident-response | #github

3.

Closing the Blind Spot: Securing Personal Repositories in the Software Supply Chain

blog | 2026-08-13 13:48 | wiz.io | original ↗ | #ai-security | #supply-chain | #appsec

4.

Rickrolling the World Cup, unleashing AI across Google, 0-click stored XSS on Next.js – ethical hacker roundup

blog | 2026-07-21 08:36 | yeswehack.com | original ↗ | #ai-security | #vulnerability-research | #github

5.

And another one. GitHub ships break-glass credential revocation

blog | 2026-07-01 00:00 | aikido.dev | original ↗ | #supply-chain | #incident-response | #credential-security

6.

How Borg pushes findings to Linear, Jira, and GitHub automatically

blog | 2026-06-01 00:00 | borghq.io | original ↗ | #cloud | #vulnerability-management | #remediation

7.

GitHub's VS Code Extension Breach Was a Developer-Device Failure, Not a GitHub-Only Story

blog | 2026-05-20 00:00 | bugbunny.ai | original ↗ | #ai-security | #supply-chain | #developer-security

8.

How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Account

research | 2026-05-14 00:00 | hunt.io | original ↗ | #supply-chain | #threat-intelligence | #malware

9.

Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)

vulnerability | 2026-04-28 15:30 | CVE-2026-3854 | wiz.io | original ↗ | #rce | #vulnerability-research | #github

10.

Meet Repro-Bot, our GitHub issue triage agent

blog | 2026-04-10 00:00 | metabase.com | original ↗ | #ai-security | #open-source | #automation

11.

CodeBreach: Infiltrating the AWS Console Supply Chain and Hijacking AWS GitHub Repositories via CodeBuild

blog | 2026-01-15 15:00 | wiz.io | original ↗ | #cloud | #supply-chain | #aws

12.

Code to Cloud Attacks: From Github PAT to Cloud Control Plane

blog | 2025-12-09 13:00 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

13.

Shai-Hulud 2.0 Supply Chain Attack: 25K+ Repos Exposing Secrets

incident | 2025-11-24 10:27 | wiz.io | original ↗ | #supply-chain | #secrets | #malware

14.

Exposure Report: 65% of Leading AI Companies Found with Verified Secret Leaks

research | 2025-11-10 13:34 | wiz.io | original ↗ | #ai-security | #secrets | #github

15.

The Return of the Invisible Threat: Hidden PUA Unicode Hits GitHub repositorties

blog | 2025-10-31 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #github

16.

JFrog & GitHub: Unifying the Software Supply Chain, One Step at a Time… and Our 2025 GitHub Technology Partner Award

blog | 2025-10-28 17:30 | jfrog.com | original ↗ | #supply-chain | #devsecops | #github

17.

JFrog and GitHub: Next-Level DevSecOps

blog | 2025-09-10 14:52 | jfrog.com | original ↗ | #ai-security | #supply-chain | #devsecops

18.

s1ngularity's Aftermath: AI, TTPs, and Impact in the Nx Supply Chain Attack

incident | 2025-09-03 14:13 | wiz.io | original ↗ | #ai-security | #supply-chain | #github

19.

Empowering Defenders in the Age of AI: My Journey to XBOW

blog | 2025-08-18 12:00 | xbow.com | original ↗ | #ai-security | #github | #offensive-security

20.

‘Airborne’ AirPlay attacks, netting $64k from deleted files, triaging AI slop – ethical hacker news roundup

blog | 2025-05-16 13:00 | yeswehack.com | original ↗ | #ai-security | #bug-bounty | #rce

21.

2025 State of Code Security: Key Trends and Risks

blog | 2025-02-20 16:38 | wiz.io | original ↗ | #cloud | #supply-chain | #github

22.

10 Years of the GitHub Security Bug Bounty Program

blog | 2024-07-15 17:50 | hackerone.com | original ↗ | #bug-bounty | #github | #vulnerability-disclosure

23.

Good Game, Gone Bad: Xeno RAT Spread Via .gg Domains and GitHub

blog | 2024-06-25 00:00 | hunt.io | original ↗ | #github | #c2 | #rat

24.

Catch them early: Integrate Automated Pentesting in your CI/CD Pipeline

blog | 2024-05-16 00:00 | ethiack.com | original ↗ | #ai-security | #gitlab | #devsecops

25.

5 reasons to strive for better disclosure processes

blog | 2024-04-15 13:00 | blog.trailofbits.com | original ↗ | #open-source | #github | #rust

26.

Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier

blog | 2024-03-28 16:55 | wiz.io | original ↗ | #cloud | #supply-chain | #cloud-security

27.

DevSecOps: How GitHub Bridges the Gap Between Security and Development

blog | 2024-03-19 16:50 | hackerone.com | original ↗ | #devsecops | #github | #security-culture

28.

How to connect HackenProof with GitHub issue

blog | 2023-12-26 13:30 | hackenproof.com | original ↗ | #bug-bounty | #automation | #github

29.

We want to check out your BChecks ...

blog | 2023-07-03 14:54 | portswigger.net | original ↗ | #cloud | #github | #community

30.

Pull Requests 101

blog | 2021-09-09 01:00 | hackerone.com | original ↗ | #git | #open-source | #code-review