SecurityAlpine's GitLab rebuild after RCE try
Alpine Linux rebuilt its GitLab server and reset passwords after attackers tried to exploit a maximum-severity flaw and it could not rule out code execution.
> Search
30 results for “git”
Security
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
AI & MLAI Training Gap Tests Governance
ISACA research shows 32% of digital trust professionals say their organizations fail to address AI risks, as adoption climbs.
AI & MLCopilot CLI's Model Lottery Problem
Adversa AI says encrypted 'zombie instructions' on web pages can extract secrets through GitHub Copilot CLI, depending on which model handles the session.
Cyber CrimeCling Botnet Hides Commands in STUN Traffic
New botnet abuses common STUN protocol and public servers to blend command-and-control with legitimate NAT-traversal activity.
Cyber CrimeShinyHunters suspect held in Jordan
A reported detention in Jordan and a week of digital silence are testing the extortion group's resilience.
SecurityGitLab's 9.9 Gateway Flaw: Self-Hosters First
GitLab patched a critical AI Gateway flaw scoring 9.9, but the fix only reaches organizations running their own gateway.
SecurityMicrosoft: Attackers Lead AI Arms Race
Microsoft's 2026 Digital Defense Report finds attackers are gaining AI advantages faster than defenders, risking a spike in unpatched vulnerabilities.
Cyber CrimeDual RMM Phishing Attack Evades Defenses
Microsoft says phishing emails hid a legitimate MSP360 installer behind meeting and PDF lures, then used it to install ScreenConnect as a redundant remote-access channel.
SecurityGoogle's PQC Roadmap Reshapes Digital Trust
Google's post-quantum cryptography roadmap accelerates a migration to 2029 and introduces Merkle Tree Certificates, pressuring traditional X.509 infrastructure.
Cyber CrimeSigned Driver, Dead AV: A Fake LastPass Trap
A counterfeit GitHub installer for LastPass Authenticator loads a Microsoft-signed kernel driver that kills security tools before stealing passwords.
Cyber CrimeCrowdSec Ties Code Theft to TanStack Flaw
CrowdSec says about 300 repositories were hit and links the theft to a May 2026 TanStack supply chain attack.
Cyber CrimeAPT36 Uses GitHub Repos as Stealth C2
Zscaler ThreatLabz says Transparent Tribe is running four new tools against Indian and Afghan government targets, hiding command traffic inside private GitHub repositories.
Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
AI & MLOpenAI Details AI Models Going Rogue
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.
SecurityGitLab's Perfect 10 Flaw Exposes Secrets
A maximum-severity path traversal bug in GitLab's repository commits API lets unauthenticated attackers read arbitrary files, and probes are already underway.
Cyber CrimeMeshCentral Backdoor Hid Inside 3BB Network
Hunt.io says an attacker used a legitimate remote-management tool to hold root access inside Thailand's 3BB and target subscriber credentials.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Tech NewsLogitech G305 X Superlight review: 61g wireless at a budget price
We test the Logitech G305 X Superlight, a 61g wireless mouse with dual connectivity and a low profile.
Tech NewsEFF Urges Courts: Don't Bend Copyright for AI
Digital rights group warns judges against reshaping copyright law in response to AI anxiety, urging reliance on fair use.
SecurityBrowser extensions turn into supply chain risk
Attackers buy legitimate Chrome, Edge extensions and push malware via updates, Socket reports.
Cyber Crimenpm Mirrors Turned into Phishing Hosts
Attackers abuse npm mirrors to host HTML phishing pages, bypassing security filters by serving from legitimate domains.
SecurityGitLab Flaw Exploited Within Days of Patch
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
Tech NewsSigned Drivers Turn Into Attack Tools
This week's threats exploit trusted components: signed drivers, legitimate apps, and AI to bypass defenses.
Tech NewsCursor's Origin Aims at GitHub's Woes
AI startup Cursor, now part of SpaceX, launches Origin, a code-hosting platform that integrates with GitHub amid user frustration over outages.
SecurityGitLab Critical Flaw Allows Unauthenticated Project Deletion
A critical GitLab vulnerability could let unauthenticated attackers modify or delete public projects and user data.
SecuritySnowflake CI/CD Flaw Opens Door to Issue-Based Injection
A GitHub Actions workflow flaw in Snowflake's connector repo allowed crafted issues to execute commands with exposed Jira credentials.
Tech NewsGitHub Outage Disrupts Developer Services
GitHub confirms widespread outage affecting core services, with error rates reaching 50% for downloads.
TrendingEFF's Human Touch in an AI Era
EFF's art director explains why the digital rights group still relies on human artists for its images.
SecurityMozilla Rotates GPG Signing Key After GitHub Exposure
Mozilla replaced the GPG key for Firefox and Thunderbird after an unencrypted copy leaked to a private GitHub repo.