Morning Overview on MSN

GitHub’s critical flaw let anyone with push access execute code on servers holding millions of private repos

A single git push command. That is all it would have taken for someone with write access to a repository on GitHub Enterprise ...
Morning Overview on MSN

Microsoft patches GitHub’s worst vulnerability in years within two hours of disclosure — no exploitation found

A critical remote code execution flaw in GitHub was patched by Microsoft in roughly two hours after public disclosure, ...
Bleeping Computer

Claude Code leak used to push infostealer malware on GitHub

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...
GovInfoSecurity

Trellix Discloses Source Code Hack

Trellix disclosed over the weekend that hackers found their way to its source code repository. The company said that ...
Dark Reading

Trellix Source Code Breach Highlights Growing Supply Chain Threats

Info is scant, but such breaches can reveal where a security product's controls are located and how detections are designed, ...

One command turns any open-source repo into an AI agent backdoor. OpenClaw proved no supply-chain scanner has a detection category for it

CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...

Anthropic says its leak-focused DMCA effort unintentionally hit legit GitHub forks

The DMCA notice that GitHub received late Tuesday focuses on a repository containing the leaked source code originally posted ...
Bleeping Computer

Target employees confirm leaked source code is authentic

Multiple current and former Target employees have reached out to BleepingComputer to confirm that the source code and documentation shared by a threat actor online match real internal systems. A ...
Gizmodo

Court Orders GitHub to Reveal Who Leaked Twitter’s Source Code

After Twitter caught wind of its source code being leaked on GitHub, the only thing on the company’s mind was revenge. Now, Twitter has an ace up its sleeve as the US District Court for the Northern ...
Neowin

Id Publishes Quake II 2023 Source Code on Github

Source code for Quake II's 2023 rerelease is now available for all. The classic gameplay brings modern updates and is as modder friendly as Doom. The code is GPL-licensed and on Github now. The 2023 ...
TechCrunch

How a mistakenly published password exposed Mercedes-Benz source code

Mercedes-Benz accidentally exposed a trove of internal data after leaving a private key online that gave “unrestricted access” to the company’s source code, according to the security research firm ...