A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories ...

Wiz researchers investigated and found the core of the flaw, a threat actor ID bypass due to unanchored regexes, and notified ...

The vulnerability was spotted in August 2025, so users should patch now.

Three vulnerabilities in Anthropic’s MCP Git server allow prompt injection attacks that can read or delete files and, in some ...

Update to the latest version and monitor for unexpected .git directories in non-repository folders, developers are told.

North Korean-linked hackers targeted more than 3,100 IP addresses tied to AI, crypto, and finance firms using fake job interviews, security researchers said.

Anthropic’s official Git MCP server hit by chained flaws that enable file access and code execution - SiliconANGLE ...

Recently GitHub disabled the Rockchip Linux MPP repository, following a DMCA takedown request from the FFmpeg team. As of writing the affected repository remains unavailable. At the core of this ...

Once trust is granted to the repository's author, a malicious app executes arbitrary commands on the victim's system with no ...

Hackers are claiming to be selling internal source code belonging to Target Corporation, after publishing what appears to be ...

Microsoft first started adopting Anthropic’s Claude Sonnet 4 model inside its developer division in June last year, before ...

North Korean hackers target macOS developers with malware hidden in Visual Studio Code task configuration files.