Tag: Github

OpenCode Updates Address MCP Server Vulnerability Affecting Windows And WSL Users

Risk & Resilience
OpenCode has fixed a security flaw that could allow malicious MCP servers to execute code during sign in on Windows and WSL environments.

ExD Strengthens SAP Collaboration Through Global Partner Summit Participation

Wired
Excellence Delivered CEO Wasil Amjad attended SAP Partner Summit EMEA and MEE 2026 in Amsterdam, exploring AI innovation, enterprise technology and digital transformation opportunities.

Third Party Com Domain Misused In ClickFix Campaign Targeting Windows Users

Risk & Resilience
Security researchers have found the third-party.com placeholder domain serving ClickFix malware lures, affecting users through fake verification pages and malicious commands.

Wiz Reveals GitHub Actions Workflow Vulnerability In Snowflake Repository

Risk & Resilience
Wiz has disclosed a GitHub Actions workflow injection flaw in a Snowflake public repository that could allow crafted GitHub issues to trigger command execution and expose internal Jira credentials.

Operation BlueDash Uses Fake Microsoft Teams Updates To Deploy Remote Access Tools

Risk & Resilience
Researchers have uncovered Operation BlueDash, a phishing campaign that uses fake Microsoft Teams updates to deploy remote access tools and establish persistent access to Windows systems.

GitHub Introduces Three Day Dependabot Delay To Reduce Supply Chain Risks

Risk & Resilience
GitHub has introduced a default three day cooldown for Dependabot version updates to help reduce the risk of poisoned software packages spreading through supply chains.

Thousands Of Malicious GitHub Repositories Distribute SmartLoader Malware Through AI Lures

Risk & Resilience
Researchers have uncovered the FakeGit campaign using nearly 7,600 malicious GitHub repositories, including AI skills and MCP servers, to distribute SmartLoader and StealC malware.

North Korea Linked npm Packages Impersonate Rollup Polyfill Tools To Target Developer Systems And Steal Secrets

Risk & Resilience
Security researchers have uncovered malicious npm packages linked to North Korea that impersonate Rollup polyfill tools to deliver remote access malware and steal developer credentials and sensitive data.

GuardFall Research Reveals Shell Injection Risks Across Open Source AI Coding Agents

Risk & Resilience
Adversa AI has disclosed GuardFall, a shell injection bypass affecting 10 of 11 tested open source AI coding agents, exposing systems to command execution and credential theft risks.

GitHub Strengthens Actions Security With Checkout Update to Block Pwn Request Attacks

Risk & Resilience
GitHub has updated actions/checkout to block common pwn request attack patterns by default, helping protect repositories from software supply chain threats linked to pull_request_target workflows.

Anthropic Accidentally Exposes Part Of Claude Code Source Files

Global Insights
Anthropic releases nearly 2,000 files and 500,000 lines of Claude Code source code by mistake, clarifying no sensitive data was affected.

Malicious Go Crypto Module Steals Passwords And Deploys Rekoobe Backdoor On Linux Systems

Risk & Resilience
Researchers uncover a malicious Go module impersonating golang.org/x/crypto that steals terminal passwords, installs SSH persistence, and deploys the Rekoobe Linux backdoor.

Recent articles

spot_img