[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"vendor:github":3},{"vendor":4,"products":15,"links":31,"research":47,"news":100,"iocs":153,"iocs_total":231,"activity":232},{"slug":5,"name":6,"domain":7,"website_url":8,"hq_country":9,"description":10,"logo_path":11,"brand_color":12,"pitch":13,"pitch_source_url":8,"updated_at":14},"github","GitHub","github.com","https:\u002F\u002Fgithub.com\u002F","US","Code hosting platform owned by Microsoft. GitHub Security Lab researches open-source vulnerabilities.","\u002Fvendor-logos\u002Fgithub.png",null,"Join the world's most widely adopted, AI-powered developer platform where millions of developers, businesses, and the largest open source community build software that advances humanity.","2026-10-16T13:44:12.179385+00:00",[16],{"slug":17,"name":18,"url":19,"description":20,"pitch":21,"pitch_source_url":19,"controls":22},"advanced-security","GitHub Advanced Security","https:\u002F\u002Fgithub.com\u002Fsecurity\u002Fadvanced-security","Dependency review, code scanning and secret scanning with push protection.","Fix vulnerabilities and safeguard your software supply chain with built-in, AI-powered security.",[23,27],{"slug":24,"name":25,"problem":26},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"slug":28,"name":29,"problem":30},"software-supply-chain","Software supply chain security","Malicious and vulnerable open-source packages are caught before they ship.",[32,36,40,44],{"kind":33,"label":34,"url":35},"advisories","GitHub Advisory Database","https:\u002F\u002Fgithub.com\u002Fadvisories",{"kind":37,"label":38,"url":39},"research","GitHub Security Lab","https:\u002F\u002Fsecuritylab.github.com\u002F",{"kind":41,"label":42,"url":43},"review","PeerSpot: GitHub Advanced Security user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fgithub-advanced-security-reviews",{"kind":41,"label":45,"url":46},"Gartner Peer Insights: GitHub user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fgithub-826147115",{"total":48,"stories":49},18,[50,55,60,65,70,75,80,85,90,95],{"slug":51,"title":52,"published_at":53,"brief":54},"github-agentic-autofix-and-the-question-of-who-owns-a-bad-ai-patch-c706ca","GitHub Agentic Autofix and the question of who owns a bad AI patch","2026-11-12T07:00:38+00:00","GitHub discusses accountability for AI-generated code patches and the implications for security.",{"slug":56,"title":57,"published_at":58,"brief":59},"git-patches-flaw-that-lets-malicious-repositories-execute-code-during-recursive-98e4d7","Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones","2026-11-10T19:23:10+00:00","Git fixes flaw allowing malicious repos to execute code during recursive clones.",{"slug":61,"title":62,"published_at":63,"brief":64},"github-to-block-pull-request-target-workflows-by-default-starting-december-2-89cbfc","GitHub to Block pull_request_target Workflows by Default Starting December 2","2026-11-05T15:01:39.11+00:00","GitHub to block pull_request_target workflows by default in public repos on Dec 2, 2026.",{"slug":66,"title":67,"published_at":68,"brief":69},"github-s-npm-package-firewall-can-block-brand-new-versions-before-they-install-bc0c74","GitHub’s npm package firewall can block brand-new versions before they install","2026-10-28T17:09:14+00:00","GitHub's new npm package firewall blocks new versions, malware, and critical vulnerabilities before installation.",{"slug":71,"title":72,"published_at":73,"brief":74},"the-pwn-request-reckoning-what-still-works-against-github-actions-94220a","The Pwn Request Reckoning: What Still Works Against GitHub Actions","2026-10-26T13:24:12+00:00","GitHub Actions pull_request_target attacks persist despite 2026 security changes.",{"slug":76,"title":77,"published_at":78,"brief":79},"github-actions-adds-cache-mode-to-limit-cache-poisoning-risk-d65f1f","GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk","2026-09-16T19:36:23.9+00:00","GitHub Actions adds cache-mode to mitigate cache poisoning risks.",{"slug":81,"title":82,"published_at":83,"brief":84},"new-github-pypi-policies-boost-supply-chain-security-7123e6","New GitHub, PyPI Policies Boost Supply Chain Security","2026-07-27T14:26:00+00:00","GitHub and PyPI implement new policies to enhance supply chain security.",{"slug":86,"title":87,"published_at":88,"brief":89},"github-adds-3-day-dependabot-cooldown-to-limit-poisoned-package-adoption-c2fbf6","GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption","2026-07-27T08:01:23+00:00","GitHub Dependabot adds a 3-day cooldown for version updates to prevent poisoned package adoption.",{"slug":91,"title":92,"published_at":93,"brief":94},"npm-12-disables-install-scripts-by-default-to-reduce-supply-chain-risk-470b8a","npm 12 Disables Install Scripts by Default to Reduce Supply Chain Risk","2026-07-09T16:49:02+00:00","npm 12 disables install scripts by default to mitigate supply chain risks.",{"slug":96,"title":97,"published_at":98,"brief":99},"github-updates-actions-checkout-to-block-common-pwn-request-attack-patterns-a790ae","GitHub Updates actions\u002Fcheckout to Block Common Pwn Request Attack Patterns","2026-06-23T14:22:03+00:00","GitHub updates actions\u002Fcheckout to block pwn request attacks via pull_request_target.",{"total":101,"stories":102},100,[103,108,113,118,123,128,133,138,143,148],{"slug":104,"title":105,"published_at":106,"brief":107},"hackers-use-4-837-stolen-github-accounts-to-target-61-764-repositories-318bd2","Hackers Use 4,837 Stolen GitHub Accounts to Target 61,764 Repositories","2026-11-13T09:41:06+00:00","Hackers used 4,837 stolen GitHub accounts to target 61,764 repositories in the wfx-loot campaign.",{"slug":109,"title":110,"published_at":111,"brief":112},"attacker-targets-60-000-github-repositories-in-credential-theft-campaign-92fa12","Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign","2026-11-12T13:39:03+00:00","Attacker targets 60,000 GitHub repos with credential-stealing malware via hijacked accounts.",{"slug":114,"title":115,"published_at":116,"brief":117},"check-your-github-repos-a-secret-stealer-hit-tens-of-thousands-of-them-855e21","Check your GitHub repos: A secret stealer hit tens of thousands of them","2026-11-12T09:24:32+00:00","Threat actor wfx-loot targets GitHub repos with stolen credentials, stealing secrets from thousands.",{"slug":119,"title":120,"published_at":121,"brief":122},"wfx-phantom-the-github-actions-secret-stealer-that-deletes-its-tracks-88ff9b","WFX Phantom: The GitHub Actions Secret Stealer That Deletes Its Tracks","2026-11-12T07:58:30+00:00","WFX Phantom malware uses compromised GitHub accounts to steal secrets via GitHub Actions.",{"slug":124,"title":125,"published_at":126,"brief":127},"git-fixes-six-vulnerabilities-including-code-execution-during-recursive-clones-46b23e","Git fixes six vulnerabilities, including code execution during recursive clones","2026-11-11T14:26:12+00:00","Git fixes six vulnerabilities, including code execution during recursive clones.",{"slug":129,"title":130,"published_at":131,"brief":132},"hackers-steal-github-tokens-through-malicious-vs-code-extension-that-remained-av-80f389","Hackers Steal GitHub Tokens Through Malicious VS Code Extension That Remained Available for 18 Minutes","2026-11-10T09:54:32+00:00","Malicious VS Code extension stole GitHub tokens for 18 minutes.",{"slug":134,"title":135,"published_at":136,"brief":137},"ghostaction-hackers-compromise-500-github-accounts-to-steal-aws-openai-and-cloud-bc2371","GhostAction Hackers Compromise 500+ GitHub Accounts to Steal AWS, OpenAI, and Cloud Credentials","2026-11-09T16:29:38+00:00","GhostAction hackers compromised 500+ GitHub accounts to steal cloud and AI credentials.",{"slug":139,"title":140,"published_at":141,"brief":142},"week-in-review-binance-hit-by-6-3-billion-theft-impact-of-brotli-vulnerability-52aac2","Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability","2026-11-01T09:00:00+00:00","Week in review covers r\u002Fopensource AI ban, Microsoft Authenticator flaw, GitHub token theft, and K-12 school breaches.",{"slug":144,"title":145,"published_at":146,"brief":147},"north-korean-hackers-steal-developer-credentials-to-inject-malware-into-github-a-cd1ad3","North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages","2026-10-30T15:15:02+00:00","North Korean DeceptiveDevelopment group steals developer credentials to inject malware into GitHub and software",{"slug":149,"title":150,"published_at":151,"brief":152},"researchers-hacked-cursor-github-copilot-codex-vs-code-and-claude-desktop-embedd-5b2576","Researchers Hacked Cursor, GitHub Copilot, Codex, VS Code, and Claude Desktop Embedded Browsers","2026-10-30T11:18:28+00:00","Researchers found vulnerabilities in embedded browsers of AI coding tools like Cursor, Copilot, Codex, VS Code, and",[154,157,161,163,165,169,170,174,177,179,181,183,185,187,189,192,194,199,202,204,206,208,210,212,217,219,221,225,227,229],{"type":155,"value":156,"article_slug":104,"article_title":105,"published_at":106},"malware","wfx-loot",{"type":155,"value":156,"article_slug":158,"article_title":159,"published_at":160},"hackers-compromise-4-800-github-accounts-to-steal-cloud-credentials-ec46d2","Hackers compromise 4,800 GitHub accounts to steal cloud credentials","2026-11-12T22:25:30+00:00",{"type":155,"value":162,"article_slug":109,"article_title":110,"published_at":111},"CI secret stealer",{"type":155,"value":164,"article_slug":114,"article_title":115,"published_at":116},"wfx",{"type":155,"value":164,"article_slug":166,"article_title":167,"published_at":168},"hackers-hijack-4-837-github-accounts-to-target-61-764-repositories-with-ci-secre-67a810","Hackers Hijack 4,837 GitHub Accounts to Target 61,764 Repositories With CI Secret-Stealing Malware","2026-11-12T08:15:03+00:00",{"type":155,"value":164,"article_slug":119,"article_title":120,"published_at":121},{"type":155,"value":162,"article_slug":171,"article_title":172,"published_at":173},"compromised-github-accounts-push-ci-secret-stealer-to-tens-of-thousands-of-repos-8f22bc","Compromised GitHub accounts push CI secret stealer to tens of thousands of repositories","2026-11-12T01:45:00+00:00",{"type":175,"value":176,"article_slug":124,"article_title":125,"published_at":126},"cve","CVE-2026-105437",{"type":175,"value":178,"article_slug":124,"article_title":125,"published_at":126},"CVE-2026-111760",{"type":175,"value":180,"article_slug":124,"article_title":125,"published_at":126},"CVE-2026-113408",{"type":175,"value":182,"article_slug":124,"article_title":125,"published_at":126},"CVE-2026-114466",{"type":175,"value":184,"article_slug":124,"article_title":125,"published_at":126},"CVE-2026-114467",{"type":175,"value":186,"article_slug":124,"article_title":125,"published_at":126},"CVE-2026-114469",{"type":155,"value":188,"article_slug":129,"article_title":130,"published_at":131},"tpcp.tar.gz",{"type":190,"value":191,"article_slug":134,"article_title":135,"published_at":136},"ip","193.32.204.199",{"type":155,"value":193,"article_slug":134,"article_title":135,"published_at":136},"security-audit.yml",{"type":190,"value":195,"article_slug":196,"article_title":197,"published_at":198},"54.205.16.142","hackers-target-61-github-repositories-with-command-injection-attacks-to-steal-ci-eca283","Hackers Target 61 GitHub Repositories With Command Injection Attacks to Steal CI\u002FCD Secrets","2026-11-02T04:21:41+00:00",{"type":200,"value":201,"article_slug":196,"article_title":197,"published_at":198},"mitre_attack","T1059.004",{"type":200,"value":203,"article_slug":196,"article_title":197,"published_at":198},"T1552.001",{"type":155,"value":205,"article_slug":139,"article_title":140,"published_at":141},"Gheist",{"type":155,"value":207,"article_slug":144,"article_title":145,"published_at":146},"DEV#POPPER",{"type":155,"value":209,"article_slug":144,"article_title":145,"published_at":146},"NullReceive",{"type":155,"value":211,"article_slug":144,"article_title":145,"published_at":146},"OmniStealer",{"type":175,"value":213,"article_slug":214,"article_title":215,"published_at":216},"CVE-2026-41940","hackers-hijack-42-github-repositories-to-plant-malware-traps-for-claude-gemini-a-dbf956","Hackers Hijack 42 GitHub Repositories to Plant Malware Traps for Claude, Gemini, and Cursor Users","2026-10-28T05:58:08+00:00",{"type":155,"value":218,"article_slug":214,"article_title":215,"published_at":216},"testmetest",{"type":155,"value":220,"article_slug":214,"article_title":215,"published_at":216},"TrapDoor",{"type":155,"value":205,"article_slug":222,"article_title":223,"published_at":224},"private-repos-still-leak-secrets-to-gheist-a-stolen-github-token-campaign-6e708b","Private repos still leak secrets to Gheist, a stolen GitHub token campaign","2026-10-27T10:58:07+00:00",{"type":200,"value":226,"article_slug":222,"article_title":223,"published_at":224},"T1003.005",{"type":200,"value":228,"article_slug":222,"article_title":223,"published_at":224},"T1059.001",{"type":200,"value":230,"article_slug":222,"article_title":223,"published_at":224},"T1070.004",170,[233,237,240,244,247,250],{"month":234,"reported":235,"affected":236},"2026-06-01",5,11,{"month":238,"reported":239,"affected":236},"2026-07-01",4,{"month":241,"reported":242,"affected":243},"2026-08-01",0,3,{"month":245,"reported":246,"affected":235},"2026-09-01",1,{"month":248,"reported":249,"affected":48},"2026-10-01",2,{"month":251,"reported":243,"affected":252},"2026-11-01",12]