Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack
Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking, a new study has revealed.This includes repositories from org…
Fake Zero-Day PoC Exploits on GitHub Push Windows, Linux Malware
Hackers are impersonating cybersecurity researchers on Twitter and GitHub to publish fake proof-of-concept exploits for zero-day vulnerabilities that infect Wi…
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits
At least half of dozen GitHub accounts from fake researchers associated with a fraudulent cybersecurity company have been observed pushing malicious repositori…
GitHub Dependabot Now Alerts Developers On Vulnerable GitHub Actions
Cloud-based code hosting platform GitHub has announced that it will now start sending Dependabot alerts for vulnerable GitHub Actions to help developers fix se…
Fedora 35: golang-github-containerd-cni 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Fedora 35: golang-github-containernetworking-cni 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Critical Shopify Vulnerability Exposed GitHub Access Token And Shopify Repos
Popular e-commerce platform Shopify had a simple yet serious vulnerability that could have devastating results.…Critical Shopify Vulnerability Exposed GitHub A…
GitHub Vulnerability Could Expose Users' Session Tokens ' Bug Fixed
GitHub has recently patched a vulnerability that potentially threatened all user accounts. Though, it actually…GitHub Vulnerability Could Expose Users' Session…
Fedora 31: golang-github-ulikunitz-xz 2020-deff052e
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
Fedora 32: golang-github-ulikunitz-xz 2020-e384830a
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
GitHub launches 'Security Lab' to help secure open source ecosystem
In GitHub's new 'Security Lab', fourteen companies unite get together to search, find, and fix security flaws in GitHub-hosted open source projects. Learn more…
GitHub launches 'Security Lab' to help secure open source ecosyst
In GitHub's new 'Security Lab', fourteen companies unite get together to search, find, and fix security flaws in GitHub-hosted open source projects. Learn more…
GitHub acquires Semmle to help developers spot security vulnerabilities
Popular software hosting service GitHub has acquired
Fedora 43 golang-github-openprinting-ipp-usb Important DoS CVE-2026-27145
0.9.34 - security fixes for CVE-2026-27145
openSUSE 16.0 golang-github-prometheus-alertmanager Update 2026-21136-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
openSUSE Tumbleweed golang-github-prometheus Moderate CVE-2026-40179
An update that solves one vulnerability can now be installed.
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new …
Ubuntu 26 Alpha Essential python-github-anotherpackage Upgrade 2025-78901-9
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.
SUSE golang-github-prometheus-prometheus Key Security Update 2026-20232-1
An update that solves two vulnerabilities and contains one feature can now be installed.
Fedora 42: golang-github-tetratelabs-wazero Important Update CVE-2025-47906
Update to 1.11.0 upstream release Resolves: rhbz#2413614
Ubuntu 23: golang-github-google-wire Critical Patch CVE-2025-47906
Rebuilt for CVE-2025-47906
Fedora 42: golang-github-jwt Important Rebuild for CVE-2025-61723
Rebuilt for CVE-2025-61723
Fedora 42: Advisory for golang-github-alecthomas-chroma-2 CVE-2025-58185
Rebuilt for CVE-2025-58185
Fedora 43: golang-github-crypto-6 CVE-2025-62671 Recompiled Upgrade
Rebuilt for CVE-2025-61723