A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories ...

Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.

Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

Build pgit once, then generate a browsable, syntax-highlighted “Code” view for any repo you can host locally or anywhere, ...

Prompt injection for the win Anthropic has fixed three bugs in its official Git MCP server that researchers say can be ...

Researchers found the popular model context protocol (MCP) servers, which are integral components of AI services, carry ...

Recently GitHub disabled the Rockchip Linux MPP repository, following a DMCA takedown request from the FFmpeg team. As of writing the affected repository remains unavailable. At the core of this ...

Developers have identified references to an unidentified “MODEL1” in DeepSeek’s GitHub repository, suggesting preparations for a new flagship model. The ...

North Korean-linked hackers targeted more than 3,100 IP addresses tied to AI, crypto, and finance firms using fake job interviews, security researchers said.

Anthropic’s official Git MCP server hit by chained flaws that enable file access and code execution - SiliconANGLE ...

Wiz researchers investigated and found the core of the flaw, a threat actor ID bypass due to unanchored regexes, and notified ...