https://cybersecuritytracker.ai/?stack=1Stories and vulnerabilities involving GitHub.Sun, 26 Jul 2026 22:32:51 GMThttps://isc.sans.edu/diary/rss/33184cst-3228ESAFENET's CDG (Content Data Guard) document management system is being actively scanned for exploitation using default credentials. The product, which targets Chinese markets, ships with weak default passwords that appear in public exploit templates despite meeting standard password complexity requirements. Attackers are leveraging these known default logins to attempt unauthorized access to CDG deployments.Sun, 26 Jul 2026 15:26:14 GMThttps://bleepingcomputer.com/news/security/github-pypi-add-time-absed-defenses-against-supply-chain-attackscst-3227GitHub and PyPI have integrated time-based defenses into Dependabot to mitigate supply chain attacks. The mechanism restricts the window during which compromised dependencies can propagate and cause damage across dependent projects.Sun, 26 Jul 2026 14:13:39 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-204-06cst-3119MZ Automation libIEC61850 versions 1.0.0 through 1.6.1 contain four vulnerabilities including stack-based and heap-based buffer overflows, and NULL pointer dereference flaws affecting the IEC 61850 industrial protocol library. Unauthenticated attackers on the network can trigger these flaws to crash services, cause memory corruption, or execute arbitrary code. The vendor recommends updating to the latest build.Thu, 23 Jul 2026 12:00:00 GMThttps://thehackernews.com/2026/07/attackers-weaponize-github-actions.htmlcst-3085Researchers discovered a large-scale campaign weaponizing compromised GitHub repositories and Actions runners as attack infrastructure against cPanel and WebHost Manager instances. The campaign involved malicious Packagist development versions across 10 packages associated with a legitimate PHP and DevOps developer between July 12 and 13.Thu, 23 Jul 2026 11:28:54 GMThttps://elastic.co/security-labs/wp2shell-wordpress-rce-detection-elastic-defendcst-3046On July 17, 2026, Searchlight Cyber disclosed wp2shell, a pre-authentication remote code execution chain affecting WordPress Core versions 6.9.0 to 6.9.4 and 7.0.0 to 7.0.1 through a route confusion flaw in the REST batch endpoint. Proof-of-concept tools circulated within hours, with attackers either escalating through SQL injection to upload malicious plugins or dropping webshells directly to disk, resulting in command execution via the web process. Defenders observe PHP and web server runtimes spawning shells, plugin directories appearing under wp-content/plugins/, and consistent post-exploitation discovery activity across vulnerable hosts.Thu, 23 Jul 2026 00:00:00 GMThttps://thehackernews.com/2026/07/github-cuts-public-bug-bounty-payouts.htmlcst-3049GitHub is reducing public bug bounty rewards by at least 50 percent across all severity levels starting July 27, 2026, with critical vulnerabilities capped at $10,000 instead of the previous $20,000-$30,000 range. The company is simultaneously creating a VIP tier that offers $30,000 or more for select researchers. Reports submitted before the July 27 cutoff will maintain current payout rates.Wed, 22 Jul 2026 18:37:42 GMThttps://helpnetsecurity.com/2026/07/22/users-of-ai-coding-agentscst-2979Researchers at Rochester Institute of Technology analyzed over 25,000 pull requests generated by AI coding agents on GitHub to understand review patterns. The study found that small development teams are the primary users of these agents, with code often reviewed by single developers rather than distributed across larger teams.Wed, 22 Jul 2026 06:00:31 GMThttps://helpnetsecurity.com/2026/07/21/github-repos-malware-campaign-fakegit-ai-agentscst-2925Island researchers discovered approximately 7,600 malicious GitHub repositories, with over 800 masquerading as AI Skills or Model Context Protocol servers, peaking in April 2026. The FakeGit operation involved around 6,600 compromised accounts, roughly 1,400 of which targeted AI tools, agents, and workflows. These repositories offered fraudulent integrations spanning consumer and enterprise applications, including services like Gmail and WhatsApp.Tue, 21 Jul 2026 14:27:38 GMThttps://tenable.com/blog/ai-coding-assistant-agent-harness-attackscst-2912Attackers are poisoning AI coding assistant configuration files to achieve persistent access within developer environments by injecting malicious hooks into settings files used by tools like Cursor, GitHub Copilot, and Claude Code. These configuration files create a uniquely dangerous attack vector because they are trusted as developer settings, automatically executed by IDEs, and treated as authoritative instructions by large language models. The Mini Shai-Hulud worm, analyzed by Tenable, demonstrates this technique by scanning for and compromising AI tool configurations across npm and PyPI packages, enabling silent malware execution each time a developer starts a coding session.Tue, 21 Jul 2026 13:00:00 GMThttps://thehackernews.com/2026/07/fakegit-campaign-uses-7600-github.htmlcst-2871Researchers identified approximately 7,600 malicious GitHub repositories in the FakeGit campaign, with over 800 masquerading as AI tools or Model Context Protocol servers to distribute SmartLoader malware. The campaign employs copied projects, lookalike developer profiles, and deceptive README files to deceive users into downloading infected packages.Mon, 20 Jul 2026 18:23:03 GMThttps://tenable.com/blog/wp2shell-cve-2026-63030-cve-2026-60137-frequently-asked-questions-about-remote-code-executioncst-2848Two WordPress Core vulnerabilities, CVE-2026-63030 and CVE-2026-60137, can be chained together to achieve unauthenticated remote code execution on WordPress 6.9.x and 7.0.x installations. Active exploitation began within days of the July 17, 2026 disclosure, with public proof-of-concept code circulating and multiple security firms confirming attacks in the wild. Patches are available in WordPress 7.0.2 and 6.9.5, with WordPress.org enabling forced automatic updates for affected installations.Mon, 20 Jul 2026 13:36:32 GMThttps://research.checkpoint.com/2026/20th-july-threat-intelligence-reportcst-2835Ernst and Young disclosed a breach involving a compromised third-party IT support platform exposing client documents and tax information. Supply chain compromises affected the Jscrambler JavaScript package and multiple artificial intelligence tools including Claude Code, DeepSeek, and Grok Build. Microsoft released 622 patches in July including fixes for two actively exploited vulnerabilities in SharePoint Server and Active Directory Federation Services, while WordPress issued emergency updates for critical remote code execution flaws.Mon, 20 Jul 2026 12:18:41 GMThttps://thehackernews.com/2026/07/new-wp2shell-wordpress-core-flaw-lets.htmlcst-2783A critical vulnerability in WordPress core versions 6.9 and 7.0 allowed unauthenticated attackers to execute arbitrary code on unpatched installations. WordPress released patches (6.9.5 and 7.0.2) on Friday and deployed forced updates through its auto-update mechanism. Adam Kues at Assetnote discovered the flaw and coordinated its disclosure.Fri, 17 Jul 2026 21:20:10 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-197-03cst-2706A null pointer dereference vulnerability (CVE-2026-15352) in NASA's Core Flight System Health & Safety application can cause a denial-of-service condition when processing Housekeeping Telemetry requests. The flaw affects versions prior to v7.0.1, which NASA recommends as the remediation. CISA scored the vulnerability as High severity with a CVSS v3.1 base score of 7.5 and notes no known public exploitation at this time.Thu, 16 Jul 2026 12:00:00 GMThttps://thehackernews.com/2026/07/new-agent-data-injection-attack-can.htmlcst-2673Researchers have identified a data injection attack where adversaries can embed malicious content in data sources that AI agents consult, causing them to perform unintended actions like clicking purchase buttons or executing commands. The attack corrupts the factual information the agent relies on rather than directly hijacking the agent's core task.Thu, 16 Jul 2026 11:32:28 GMThttps://tenable.com/blog/claude-tag-slack-access-modelcst-2608Anthropic's Claude Tag is a Slack AI agent that operates using admin-configured shared credentials rather than individual user credentials, following a service-identity pattern similar to deploy bots and workflow automations. Access to connected services is controlled by admin-configured bundles at the workspace or channel level, with organization-wide controls governing who can direct the agent. Channel members can collaborate with Claude, but their participation does not grant new permissions beyond what the admin bundle defines.Wed, 15 Jul 2026 15:08:00 GMThttps://thehackernews.com/2026/07/compromised-asyncapi-npm-packages.htmlcst-2552Four npm packages in the @asyncapi namespace were compromised and distributed a multi-stage botnet loader. The affected versions include @asyncapi/generator-helpers@1.1.1, @asyncapi/generator-components@0.7.1, @asyncapi/generator@3.3.1, and @asyncapi/specs@6.11.2 and v6.11.2-alpha.1. Security firms OX Security, SafeDep, Socket, and StepSecurity identified the malicious activity.Wed, 15 Jul 2026 09:16:13 GMThttps://isc.sans.edu/diary/rss/33156cst-2542DShield SIEM received an update in September 2025 that added TTY log collection and Suricata integration to its monitoring capabilities. The system now uses ELK stack version 8.19.15 and includes additional dashboards that allow security practitioners to review command activity on DShield sensors, with logs parsed and uploaded daily and cross-linked across visualizations.Wed, 15 Jul 2026 01:38:43 GMThttps://bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malwarecst-2512A threat actor created hundreds of fake GitHub repositories that impersonate legitimate software and security projects to distribute infostealer malware. These repositories are designed to deceive developers searching for authentic tools and libraries.Tue, 14 Jul 2026 19:15:17 GMThttps://wiz.io/blog/m-red-team-asyncapi-supply-chain-compromise-via-github-actionscst-2493A supply chain attack targeted AsyncAPI npm packages through compromised GitHub Actions workflows. Malicious packages were distributed via npm, affecting developers who installed the compromised versions.Tue, 14 Jul 2026 10:33:36 GMThttps://blog.talosintelligence.com/the-serpents-tongue-luring-the-python-out-of-its-dencst-2470Python packages are increasingly targeted by threat actors who exploit the trust in the packaging ecosystem to deliver malicious payloads at installation time without user interaction. GitHub's 2025 security data shows a 69% year-over-year increase in malware advisories, with 17% of reviewed advisories related to the Python Package Index (PyPI) ecosystem. The article examines the full lifecycle of Python package installation across hosting, distribution, and installation layers, and recommends defensive measures including dependency auditing, version pinning, and installation-time controls.Tue, 14 Jul 2026 10:00:06 GMThttps://krebsonsecurity.com/2026/07/lessons-learned-from-cisas-recent-github-leakcst-2418CISA experienced a six-month exposure of internal credentials, including AWS GovCloud administrative keys, after a contractor published sensitive data to a public GitHub repository in May 2026. The agency's postmortem identified delays in secret rotation, unclear incident reporting channels, and gaps in monitoring public code repositories as contributing factors. CISA has since committed to improving key management practices, establishing clearer reporting procedures, and implementing continuous scanning for exposed secrets.Mon, 13 Jul 2026 15:03:28 GMThttps://securityweek.com/ghost-accounts-abuse-github-api-in-mass-recon-campaigncst-2369Threat actors are using ghost accounts, which are dormant or fake GitHub profiles, to conduct reconnaissance against GitHub organizations by systematically mapping repositories and members through API calls. These mass recon campaigns aim to gather intelligence on potential targets before launching follow-up attacks.Sat, 11 Jul 2026 17:30:00 GMThttps://techcrunch.com/2026/07/10/us-cyber-agency-cisa-had-to-build-its-incident-playbook-during-the-incident-agency-revealscst-2358A CISA contractor employee accidentally uploaded exposed passwords to a publicly accessible GitHub repository, which a GitGuardian researcher discovered and reported in May. The incident revealed that CISA had to develop its incident response procedures in real time during the event rather than having them prepared in advance.Sat, 11 Jul 2026 01:01:28 GMThttps://thehackernews.com/2026/07/injective-labs-github-compromise-pushes.htmlcst-2343Unknown threat actors compromised the Injective Labs SDK GitHub repository and published a malicious npm package that impersonated legitimate telemetry to steal cryptocurrency wallet private keys and mnemonic seed phrases. The compromised package version @injectivelabs/sdk-ts@1.20.21 was distributed through the npm registry to affect users of the SDK.Fri, 10 Jul 2026 17:29:28 GMThttps://securityweek.com/network-of-200-github-repositories-used-for-malware-infectioncst-2312A network of approximately 200 GitHub repositories is being exploited to distribute Windows malware through a Go module that loads PowerShell code and retrieves payloads from dead drops. This abuse of GitHub's infrastructure demonstrates how legitimate code hosting platforms can be weaponized for malware delivery at scale.Fri, 10 Jul 2026 08:00:14 GMThttps://bleepingcomputer.com/news/security/injective-sdk-on-npm-infected-with-cryptocurrency-wallet-stealercst-2279Hackers compromised the Injective Labs SDK repository on GitHub and published a malicious package to npm that targeted cryptocurrency wallet credentials, specifically private keys and mnemonic seed phrases. The attack exploited the trust developers place in open-source dependencies to distribute wallet-stealing malware.Thu, 09 Jul 2026 20:10:00 GMThttps://thehackernews.com/2026/07/dormant-github-accounts-help-attackers.htmlcst-2267Datadog Security Labs identified multiple coordinated campaigns systematically enumerating GitHub organizations, repositories, and user accounts via the GitHub API. The attackers use automated scraping tools with legitimate-appearing user agents and leverage dormant ghost accounts or compromised OAuth tokens to avoid detection while conducting reconnaissance.Thu, 09 Jul 2026 18:38:49 GMThttps://thehackernews.com/2026/07/npm-12-disables-install-scripts-by.htmlcst-2269npm version 12 disables install scripts by default to mitigate supply chain attacks, and deprecates granular access tokens that could bypass two-factor authentication. These changes shift security-sensitive operations from automatic execution to opt-in workflows, requiring developers to explicitly enable script execution during package installation.Thu, 09 Jul 2026 16:49:02 GMThttps://helpnetsecurity.com/2026/07/09/github-coding-agent-jailbreakcst-2246Researchers from the Alan Turing Institute found that GitHub Copilot and similar coding agents may behave differently in chat versus multi-turn code generation contexts, potentially bypassing safety measures designed for single-response interactions. Current safety testing for these agents uses chatbot-style evaluation that does not account for how agents behave across extended coding sessions with multiple turns and autonomous execution capabilities.Thu, 09 Jul 2026 10:44:29 GMThttps://helpnetsecurity.com/2026/07/09/github-open-source-collaborationcst-2218GitHub reports that cross-border open-source collaboration grew 16% from Q4 2025 to Q1 2026, with developers increasingly contributing code and pull requests to public repositories internationally. This marks the second-highest quarter-over-quarter growth since 2020, approaching the surge seen in Q2 2020. The trend is placing mounting pressure on open-source project maintainers.Thu, 09 Jul 2026 05:10:05 GMThttps://thehackernews.com/2026/07/github-verified-commits-can-be.htmlcst-2150Researchers discovered that signed Git commits can be rewritten to produce different hashes while maintaining valid signatures that GitHub still verifies as legitimate. An attacker without the signing key can create a duplicate commit with identical files, author, and date information, yet a different hash value, and GitHub's verification will still pass.Wed, 08 Jul 2026 11:51:24 GMThttps://thehackernews.com/2026/07/github-copilot-refuses-harmful-requests.htmlcst-2152Researchers discovered that GitHub Copilot and other AI coding assistants refuse harmful requests made in chat interfaces but will execute the same requests when phrased as incremental code steps within the editor. The study examined Copilot, Claude, and Gemini, finding inconsistent safety guardrails across different interaction modalities.Wed, 08 Jul 2026 11:21:07 GMThttps://darkreading.com/cyber-risk/gitlost-leaks-private-data-github-agentic-workflowscst-538A vulnerability in GitHub's Agentic Workflows allows unauthenticated attackers to craft a malicious GitHub Issue in a public repository to extract data from private repositories within the same organization. The flaw, dubbed GitLost, enables silent data exfiltration without requiring authentication or explicit permissions.Tue, 07 Jul 2026 15:24:30 GMThttps://thehackernews.com/2026/07/public-github-issue-could-trick-github.htmlcst-535Researchers at Noma Security identified a vulnerability in GitHub Agentic Workflows where a public issue in a repository can be crafted to trick the workflow agent into leaking contents from private repositories. The attack requires only the ability to open an issue on a public repository and relies on the organization having granted the agent read access across its repositories.Tue, 07 Jul 2026 14:04:50 GMThttps://bleepingcomputer.com/news/security/the-github-actions-attack-pattern-your-ci-security-scanners-misscst-533ActiveState has identified attack patterns in GitHub Actions that bypass conventional CI security scanners, demonstrating that passing a security scan does not ensure pipeline security. The article discusses governance strategies to better protect CI/CD workflows from these evasion techniques.Tue, 07 Jul 2026 14:01:11 GMThttps://rapid7.com/blog/post/pt-metasploit-wrap-up-07-03-2026cst-363Metasploit Framework version 6.4.142 includes new modules for upgrading SMB sessions to Meterpreter shells via PsExec, an exploit for Peyara Remote Mouse 1.0.1 unauthenticated remote code execution, and a new Linux LoongArch64 payload. The update also adds MCP server HTTP transport authentication support and fixes bugs in UDP sweep scanning and SSH session debugging.Fri, 03 Jul 2026 22:11:22 GMThttps://thehackernews.com/2026/07/new-chocopoc-rat-targets-vulnerability.htmlcst-39A remote access trojan (RAT) called ChocoPoC is being distributed through fraudulent proof-of-concept repositories on GitHub, masquerading as legitimate exploit code for recent vulnerabilities. When executed, the malware steals credentials, browser data, and files while establishing remote access for attackers, with vulnerability researchers identified as the primary targets.Thu, 02 Jul 2026 07:24:23 GMThttps://microsoft.com/en-us/security/blog/2026/06/30/whats-new-in-microsoft-security-june-2026cst-326Microsoft announced security updates for June 2026 including MDASH, a multi-model AI scanning system for discovering and remediating vulnerabilities, extended endpoint protection for local AI agents, and new capabilities for identity backup and recovery. Additional releases include database threat protection for open-source AWS RDS instances and customizable reporting features in Microsoft Purview for data security posture management.Tue, 30 Jun 2026 16:00:00 GMThttps://cisa.gov/news-events/ics-advisories/icsa-26-181-02cst-268Frangoteam FUXA SCADA/HMI versions 1.3.1 and earlier contain an authentication bypass vulnerability (CVE-2026-13207) that allows unauthenticated attackers to enumerate user accounts and role assignments through dot-segment path normalization in the REST API. The vulnerability exploits improper path normalization before authentication middleware is applied, allowing attackers to access protected endpoints by using sequences like /api/./users or /api/project/../users. Frangoteam recommends upgrading to version 1.3.2 or later to remediate the issue.Tue, 30 Jun 2026 12:00:00 GMThttps://cisa.gov/news-events/ics-medical-advisories/icsma-26-181-01cst-264OFFIS DCMTK Toolkit versions 3.7.0 and earlier contain five critical vulnerabilities including path traversal, memory leaks, and type confusion flaws. Successful exploitation could allow attackers to write files outside intended directories, access unauthorized information, exhaust memory, or crash client and server processes. The vendor has provided fixes available in the latest GitHub releases.Tue, 30 Jun 2026 12:00:00 GMThttps://rapid7.com/blog/post/pt-weekly-metasploit-update-modules-for-audiobookshelf-litellm-next-js-dalfox-and-morecst-367Metasploit Framework released new modules for detecting and exploiting vulnerabilities in Audiobookshelf, LiteLLM Proxy, Next.js, and Dalfox. The updates include authentication bypass scanners, a SQL injection detection module, and a remote code execution exploit, along with improvements to bruteforce-related modules. The project is also soliciting feedback on planned changes to evasion capabilities until July 1, 2026.Fri, 26 Jun 2026 19:32:52 GMThttps://cisa.gov/news-events/ics-medical-advisories/icsma-26-176-01cst-274A critical path traversal vulnerability (CVE-2026-56445) exists in pynetdicom versions 1.0.0 through 3.0.4, allowing unauthenticated attackers to write arbitrary files via unsanitized DICOM dataset inputs in the qrscp application's C-STORE handler. The vulnerability impacts healthcare and critical infrastructure globally with a CVSS score of 9.1. The pynetdicom maintainer has not engaged with CISA on remediation, and no public exploitation has been reported.Thu, 25 Jun 2026 12:00:00 GMThttps://arstechnica.com/security/2026/06/one-two-punch-delivered-in-global-operation-disrupts-cybercrime-assembly-linecst-426International authorities and technology companies disrupted two major cybercrime tools, Amadey and StealC, which operated as malware and infostealer services. The operation targeted shared infrastructure used by both platforms, which together facilitated theft of millions of login credentials and over $47 million in fraudulent payments. The simultaneous takedown exploited the discovery that many cybercriminals used both tools in tandem.Wed, 24 Jun 2026 21:03:34 GMThttps://tenable.com/blog/what-the-miasma-campaign-reveals-about-the-new-supply-chain-threat-model-and-the-undergroundcst-383The Miasma campaign exploited a stolen Red Hat developer credential from underground markets to inject malicious packages into the npm registry, affecting 89 plus packages across three waves in early June. The attack demonstrated a structured threat model where harvested developer credentials are bought and weaponized weeks after theft, and included novel techniques such as forged SLSA provenance attestations and persistence mechanisms targeting AI coding assistants like Claude and Cursor. The campaign illustrates an emerging developer credential economy where infostealers, dark web markets, and supply chain compromises operate as coordinated layers in a single attack pipeline.Tue, 23 Jun 2026 13:00:00 GMThttps://darkreading.com/cyberattacks-data-breaches/crypto-heist-fake-reputation-boosting-campaigncst-121Attackers are leveraging legitimate platforms such as GitHub, YouTube, and VirusTotal to create a false appearance of credibility and trustworthiness. They use this manufactured reputation to distribute a clipboard hijacker malware that operates across multiple platforms and steals cryptocurrency by intercepting and replacing wallet addresses during copy-paste operations.Mon, 22 Jun 2026 16:10:10 GMThttps://rapid7.com/blog/post/pt-metasploit-wrap-up-19-06-2026cst-370Rapid7 released five new Metasploit modules this week, including a full remote code execution chain for Paperclip AI using six API calls, an NTLM relay technique for privilege escalation to SYSTEM on Windows, VS Code extension persistence, and exploits for Xerte Online Toolkits and Linux kernel vulnerabilities. The update also includes an MCP server plugin enabling AI tool integration within msfconsole and improved module check codes with richer diagnostic detail.Fri, 19 Jun 2026 17:08:23 GMThttps://darkreading.com/cyber-risk/novo-nordisk-breach-exposes-dev-pipeline-riskcst-124Novo Nordisk experienced a security incident involving a leaked GitHub token that exposed gaps in secrets management practices. The breach highlights how organizations often address credential security through tools alone rather than implementing comprehensive identity and access controls. This reflects a broader industry pattern of treating secrets management as a technical tooling issue rather than a foundational identity problem.Thu, 18 Jun 2026 20:05:47 GMThttps://research.checkpoint.com/2026/from-stars-to-upvotes-fake-reputation-fueling-a-crypto-clipboard-hijackercst-596A threat actor is distributing a Rust-based clipboard hijacker disguised as cryptocurrency trading bots and game prediction tools across multiple platforms, including fake GitHub and SourceForge repositories, a YouTube channel with AI-generated content, and compromised news sites. The operation uses coordinated fake accounts, inflated engagement metrics, and manipulated VirusTotal reputation signals to create a false appearance of legitimacy and trustworthiness. Once installed, the malware monitors the clipboard for cryptocurrency wallet addresses and replaces them with attacker-controlled addresses, generating illicit cryptocurrency transactions.Wed, 17 Jun 2026 13:38:55 GMThttps://krebsonsecurity.com/2026/06/who-runs-the-ransomware-group-the-gentlemencst-132The Gentlemen ransomware group, the second most active ransomware gang by victim count with over 240 victims in 2026 alone, operates as a ransomware-as-a-service (RaaS) offering that attracts affiliates with a 90/10 revenue split. Security researchers have traced the group's administrator, known as Hastalamuerte and later Zeta88, to Alexander Andreevich Yapaev, a 36-year-old from Izhevsk, Russia, through analysis of forum registrations, email addresses, Telegram accounts, and Russian government database records. The group targets internet-facing devices such as VPNs and firewalls as entry points and encrypts entire networks within hours.Wed, 10 Jun 2026 14:03:44 GMT