Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver
The subgroup of an Iranian nation-state group known asNemesis Kittenhas been attributed as behind a previously undocumented custom malware dubbed Drokbk that u…
Dropbox Confirms Serious Security Breach in which Hackers Stole code from 130 GitHub Repositories
Dropbox has revealed details of a phishing attack to which it fell victim. In the attack, a threat actor was able to steal code from the company after gatherin…
GitHub Dependabot Now Alerts Developers On Vulnerable GitHub Actions
Cloud-based code hosting platform GitHub has announced that it will now start sending Dependabot alerts for vulnerable GitHub Actions to help developers fix se…
GRR Rapid Response Github Tool
What is GRR? This incident response framework is an open source tool used for live…GRR Rapid Response Github Tool on Latest Hacking News
Fedora 35: golang-github-docker-libnetwork 2022-3ecd21576a
## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump…
Fedora 35: golang-github-containerd-cni 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Fedora 35: golang-github-containernetworking-cni 2022-725ac93b48
golang-x-sys: Bump to commit bc2c85ada10aa9b6aa9607e9ac9ad0761b95cf1d golang- github-containernetworking-cni: Update to 1.1.1. golang-github-containerd-cni: Up…
Fedora 36: golang-github-docker-libnetwork 2022-cea20dae0b
## moby-engine https://github.com/moby/moby/releases/tag/v20.10.17 Includes updates to bundled libraries that fix CVEs. ## golang-github-docker-libnetwork Bump…
GitHub Enterprise Server 3.5 Released with Dependabot and More, but Cloud Version Gets Features First
GitHub Enterprise Server, the self-hosted version of the code shack's platform, has hit version 3.5. The company said there are over 60 new features, including…
GitHub Shares Details About The Stolen OAuth User Tokens Breach
Earlier this month, GitHub suffered a massive security breach affecting numerous users’ accounts. The breach…GitHub Shares Details About The Stolen OAuth User …
GitHub calls for contributions to new cybersecurity Advisory Databa
GitHub has announced that their Advisory Database for security data is now open to contributions from experts. The full contents of the Advisory Database have …
GitHub Introduces 2FA On Its Mobile Apps
GitHub has now announced a secure login feature for its users. As announced, users can…GitHub Introduces 2FA On Its Mobile Apps on Latest Hacking News
Critical Shopify Vulnerability Exposed GitHub Access Token And Shopify Repos
Popular e-commerce platform Shopify had a simple yet serious vulnerability that could have devastating results.…Critical Shopify Vulnerability Exposed GitHub A…
GitHub Vulnerability Could Expose Users' Session Tokens ' Bug Fixed
GitHub has recently patched a vulnerability that potentially threatened all user accounts. Though, it actually…GitHub Vulnerability Could Expose Users' Session…
Malicious npm Packages Published Users' Data On GitHub Page
Numerous malicious npm packages surfaced online once again. This time, four npm packages appeared in a repository that published userMalicious npm Packages Pub…
Fedora 31: golang-github-ulikunitz-xz 2020-deff052e
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
Fedora 32: golang-github-ulikunitz-xz 2020-e384830a
* The `readUvarint` function would run infinitely given specific input. The function is now terminating if more than 10 bytes of input have been read. Fixes [i…
Github uncovers malicious à¢ÂÂOctopus Scannerà¢Â targeting develope
Have you heard about 'Octopus Scanner', a dangerous strain of malware targeting developers on Github? Github has stated: "Since the primary-infected users are …
Starbucks Exposed An API Key In GitHub Public Repository
Recently, a researcher discovered a Starbucks API key exposed in a public GitHub repo. Had a hacker with malicious intentStarbucks Exposed An API Key In GitHub…
GitHub launches 'Security Lab' to help secure open source ecosystem
In GitHub's new 'Security Lab', fourteen companies unite get together to search, find, and fix security flaws in GitHub-hosted open source projects. Learn more…
GitHub launches 'Security Lab' to help secure open source ecosyst
In GitHub's new 'Security Lab', fourteen companies unite get together to search, find, and fix security flaws in GitHub-hosted open source projects. Learn more…
GitHub acquires Semmle to help developers spot security vulnerabilities
Popular software hosting service GitHub has acquired
Fedora 43 golang-github-openprinting-ipp-usb Important DoS CVE-2026-27145
0.9.34 - security fixes for CVE-2026-27145
openSUSE 16.0 golang-github-prometheus-alertmanager Update 2026-21136-1
An update that solves 3 vulnerabilities and has 3 bug fixes can now be installed.