The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...

In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed ...

CVE-2026-3854 (CVSS 8.7) enabled GitHub RCE via git push, risking cross-tenant access to millions of repositories.

Wiz discovered a critical remote code execution vulnerability in GitHub that exposed millions of repositories.

GitHub Team accounts leave enterprises exposed. eScan enforces corporate-only authentication across all GitHub tiers — ...

GitHub’s engineering team developed a fix and deployed it just over an hour after identifying the root cause, protecting both ...

In GitHub and GitHub Enterprise Server, attackers with push rights to repositories can inject malicious code. Updates fix ...

Checkmarx data surfaced after March 23, 2026 supply chain attack, prompting repository lockdown and investigation, raising ...

Application security company Checkmarx has confirmed that the LAPSUS$ threat group leaked data stolen from its private GitHub ...

It has been a bad six weeks for security firm Checmarx. Over the past 40 days, it has been the victim of at least one ...

Private and deleted GitHub repositories are not as secure as users might assume. Data from deleted forks, deleted repositories, and private repositories can still be accessed, often indefinitely. This ...