vendors/github-gitlab.htmlSecurity news, advisories and CVEs for GitHub / GitLabMon, 19 Oct 2026 12:28:44 GMT https://www.rapid7.com/blog/post/ra-gitlab-ci-cd-regex-integer-overflow-technical-analysis-cve-2026-972291wm9uj3Fri, 16 Oct 2026 13:31:56 GMTRapid7. Overview On October 12, 2026, GitLab released 19.4.2 , 19.3.5 , and 19.2.8 to fix CVE-2026-97229 , an integer overflow in its CI/CD regular-expression handling. The issue was reported through HackerOne by joaxcar . GitLab assigned it a CVSS score of 10.0 and…ResearchVulnerabilityZero-day https://cybersecuritynews.com/chatgpt-github-connector-flaw/u1tid3Thu, 15 Oct 2026 15:47:08 GMTCybersecurity News. A critical flaw in ChatGPT’s GitHub integration has the potential to turn a routine repository review into a secret-theft attack. A report published on October 15, 2026, describes a scenario in which manipulated repository instructions allegedly lead an AI…VulnerabilitySupply chainAI https://thehackernews.com/2026/10/ghostaction-compromises-about-1900.html2i4ffbThu, 15 Oct 2026 08:45:10 GMTThe Hacker News. The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the… https://www.helpnetsecurity.com/2026/10/14/github-secret-detection-model/pd4l30Wed, 14 Oct 2026 09:26:41 GMTHelp Net Security. GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model…AI https://news.google.com/rss/articles/CBMiekFVX3lxTFBiejBtb3E2TmwyNTNqRU9LaVhMUkVEQXZEbHhxdTBlOEtERlhYSzRCcGZnZHdyQVZUcDRTM0Y1czczNkZkQV9pcjhYazhhQ3hBVGRXVW5VRndGQXdqRzZCcWpDZUd3bWhEWEdRQ2YzSWF4anRfZVphVC1R0gF_QVVfeXFMTkhobkFKaENXQ182R0ZJRjEyMndlVTdQVkE0aGFZejFlemxOUEIxUkp2X3VzVkJMME80cnAxTVp6VkxsbU40UmJBaW1hUWpVUzJCZ19hU1p0c2k2UFBHMGJsMWdsWU9fY0tKWVQ5eTdQN1J6dEVYcW1zTzAzV0ZNSQ?oc=51opixnWed, 14 Oct 2026 09:25:56 GMTCybersecurity News. Hackers Breach Meta GitHub Repositories, Steal Source Code and Data of 1,500 People CyberSecurityNewsBreach https://cybersecuritynews.com/hackers-breach-meta-github-repositories/s5klpnWed, 14 Oct 2026 08:49:41 GMTCybersecurity News. Hackers used an employee’s stolen credentials to access some of Meta’s GitHub repositories, taking product source code and personal information linked to roughly 1,500 people. Most affected individuals are Meta employees in the United States, according to the…Breach https://thehackernews.com/2026/10/github-tightens-npm-publishing-after.html1qcx72aTue, 13 Oct 2026 16:18:18 GMTThe Hacker News. GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user's package without having to steal their…VulnerabilitySupply chain https://www.securityweek.com/meta-says-hackers-took-code-personal-data-of-1500-in-github-breach/1sh1sy4Tue, 13 Oct 2026 16:01:00 GMTSecurityWeek. Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.Breach https://securityaffairs.com/200868/security/gitlab-patches-max-severity-vulnerability-cve-2026-97229.htmlkjd62yTue, 13 Oct 2026 13:48:38 GMTSecurity Affairs. GitLab fixed a critical vulnerability with a maximum CVSS score of 10.0 that could let unauthenticated attackers run code on its servers. GitLab has addressed a critical security flaw, tracked as CVE-2026-97229 (CVSS score of 10.0), that could let attackers…Vulnerability https://www.helpnetsecurity.com/2026/10/13/gitlab-ci-cd-regular-expression-compiler-vulnerability-cve-2026-97229/90t0klTue, 13 Oct 2026 09:19:45 GMTHelp Net Security (+3 more sources). GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to execute arbitrary code on GitLab servers. About CVE-2026-97229 CVE-2026-97229 is…VulnerabilityResearchZero-dayAdvisory https://thehackernews.com/2026/10/gitlab-patches-cvss-100-flaw-that-could.html1s82n4qTue, 13 Oct 2026 08:43:37 GMTThe Hacker News. GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab has remediated an issue that, under certain conditions, could…Vulnerability https://cybersecuritynews.com/kimsuky-operation-gitpower/12qrslyTue, 13 Oct 2026 08:27:25 GMTCybersecurity News. Kimsuky is using GitHub and other trusted code platforms to deliver malware, run commands, and steal data from Ukrainian experts in diplomacy, security, and international policy. The North Korea-linked group’s Operation GitPower combines targeted emails, fake…MalwareAPT https://www.cybersecuritydive.com/news/gitlab-vulnerability-remote-code-execution/832736/us3e06Mon, 12 Oct 2026 14:55:57 GMTCybersecurity Dive. The company urged customers to upgrade to the latest versions of its flagship products.Vulnerability https://www.bleepingcomputer.com/news/security/gitlab-warns-of-max-severity-rce-flaw-in-regex-compiler-engine/exbfz6Mon, 12 Oct 2026 13:09:09 GMTBleepingComputer. GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]Vulnerability https://opensourcemalware.com/blog/ghostaction-attack-escalates1w8mtjqFri, 09 Oct 2026 23:55:53 GMTOpenSourceMalware. OSM has identified a new evolution of the GhostAction attack, which targets GitHub users via malicious CI workflow files and worm-like behaviourResearch https://thehackernews.com/2026/10/credential-stealing-github-actions.htmlj3tykwFri, 09 Oct 2026 19:14:28 GMTThe Hacker News. Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories. "Using the account of Takashi Kitao, author…Supply chain https://www.stepsecurity.io/blog/stepsecurity-now-inventories-ai-agent-skills-in-your-github-repositories-and-on-developer-machines1pfqc3cThu, 08 Oct 2026 19:04:03 GMTStepSecurity. Inventory the AI agent skills on developer machines and in your GitHub repositories: which agent loads them, what they can execute, and where they came from.ResearchAI https://www.bleepingcomputer.com/news/security/fakegit-malware-campaign-returns-with-17-610-malicious-github-repos/iwlrdcThu, 08 Oct 2026 17:10:55 GMTBleepingComputer. More than 17,000 fake repositories on GitHub are distributing the SmartLoader malware after the FakeGit campaign reactivated earlier this month to push the StealC infostealer. [...]Malware https://www.helpnetsecurity.com/2026/10/08/poellm-malware-github-poem-ai-servers/un44syThu, 08 Oct 2026 10:24:57 GMTHelp Net Security. Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and open-source tools, mines…Malware https://news.google.com/rss/articles/CBMiiAFBVV95cUxOa2RMWFN4bTFXT1R3aVBnQ0dLckhiLU51Mk1fM2JCcG9yb2VWSjQ0Nkt2MkVhMWtmSnVwX2dTU3Q3YnJLRTFRaGtVa0dFd1N0Qkd1NktpRGhJOUFoZnp0bnA0cV9XbWZnSjZJeG92RURCd2xKdzhMcGNQamhXRFoyN1JhNHhoV3Zj?oc=51gzldz3Thu, 08 Oct 2026 10:24:57 GMTHelp Net Security. Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Help Net SecurityMalware https://www.helpnetsecurity.com/2026/10/08/github-push-protection-modernbert/1hqhlkwThu, 08 Oct 2026 09:02:11 GMTHelp Net Security. GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks…AI https://news.google.com/rss/articles/CBMigwFBVV95cUxOc181NWNEVVk2QXJVQkdCa1NUZHJMZDl2OHAzeG9FTE5ESnFVWmE2RVgyS1pPbnJHY2ZvTGdQS1NIaTAydUJYQ09ncjh6aGdaVWE0ZUlobk5uc2F2QjFMSzNzczBuaDB4dkVpc1ZHTW9yNzRlYVFwbDJvWDVLakcydG0wVQ?oc=5b9v6n4Thu, 08 Oct 2026 09:02:11 GMTHelp Net Security. GitHub adds AI to catch passwords before a code push Help Net SecurityAI https://opensourcemalware.com/blog/how-to-investigate-a-github-repos-real-history1ht2m50Tue, 06 Oct 2026 22:00:00 GMTOpenSourceMalware. Learn to reconstruct what actually happened to a compromised repo using timestamps and logs that the person doing the manipulation doesn't control.Research https://www.theregister.com/ai-and-ml/2026/10/06/zombie-instructions-on-carefully-constructed-web-pages-could-trick-github-copilot-cli-into-sharing-secrets/5301206k7gp21Tue, 06 Oct 2026 13:00:00 GMTThe Register. Run the CLI in autopilot mode and take your chancesAI https://www.helpnetsecurity.com/2026/10/06/github-reviewbench-ai-code-review-benchmark/tf0m5pTue, 06 Oct 2026 09:29:31 GMTHelp Net Security. GitHub’s ReviewBench measures how well AI code review tools detect problems before software is released. Available in research preview through its website, the benchmark lets users compare review agents and evaluate their own tools. Code review involves…AI https://securityaffairs.com/200283/hacking/cve-2026-90970-critical-gitlab-ai-gateway-flaw-fixed.html1i0xxm7Sat, 03 Oct 2026 10:43:39 GMTSecurity Affairs. GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on self-hosted gateways. GitLab has released patches for a critical vulnerability in its AI Gateway, tracked as CVE-2026-90970 (CVSS…VulnerabilityAI https://thehackernews.com/2026/10/gitlab-patches-critical-self-hosted-ai.htmlfuhsppFri, 02 Oct 2026 17:33:31 GMTThe Hacker News. A critical flaw in GitLab's AI Gateway could let a logged-in user with Duo Agent Platform access run commands on the gateway under certain conditions, GitLab said in an advisory. The gateway is the service that connects a GitLab instance to AI models, and…VulnerabilityAI https://www.bleepingcomputer.com/news/security/gitlab-warns-of-critical-rce-vulnerability-in-ai-gateway-service/ij7atoFri, 02 Oct 2026 16:20:05 GMTBleepingComputer. GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances. [...]VulnerabilityAI https://www.securityweek.com/500000-active-credentials-left-exposed-on-github/1rrm6urThu, 01 Oct 2026 09:43:56 GMTSecurityWeek. Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. https://www.bleepingcomputer.com/news/security/over-543-000-valid-credentials-exposed-in-public-github-repositories/1870pcrWed, 30 Sep 2026 18:08:34 GMTBleepingComputer (+1 more sources). More than 543,000 credentials exposed in public GitHub repositories were still valid in July despite the platform's security measures to prevent accidental leaks of sensitive data. [...] https://thehackernews.com/2026/09/ai-coding-agents-exposed-13000-internal.htmlcrk53zWed, 30 Sep 2026 11:30:00 GMTThe Hacker News. AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300…AI https://www.wiz.io/blog/blue-agent-data-exfiltration-investigationf3wfwhTue, 29 Sep 2026 12:42:40 GMTWiz Research. See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration toolingResearch https://socket.dev/blog/mini-shai-hulud-actions19w523dThu, 24 Sep 2026 21:14:48 GMTSocket. Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.ResearchSupply chainMalware https://github.blog/security/application-security/ai-powered-fuzzing-with-the-github-security-lab-taskflow-agent/1t6lks1Thu, 24 Sep 2026 18:26:12 GMTGitHub Security Lab. In this blog post, I explain how to use the new fuzzing taskflow based on the GitHub Security Lab Taskflow Agent AI framework.ResearchAI https://www.darkreading.com/application-security/gitlab-email-addresses-supply-chain-attacks2hugesWed, 23 Sep 2026 20:53:38 GMTDark Reading. Incoming email addresses automatically assigned to each user on the platform contain highly privileged access tokens that attackers can use.Supply chain https://www.infosecurity-magazine.com/news/hundreds-leaked-github-app-keys/5qgq8nWed, 23 Sep 2026 15:00:00 GMTInfosecurity Magazine. GitGuardian finds 474 leaked GitHub App keys still authenticating, including keys with admin accessBreach https://www.aikido.dev/blog/gitlab-email-push-to-mainlqv2xiWed, 23 Sep 2026 06:00:00 GMTAikido Security. GitLab gives you a private email address to create issues. If leaked, anyone who has it can push code, execute CI/CD jobs, and bypass IP restrictions across all of your public and private projects. Category: ResearchResearch https://www.darkreading.com/cyberattacks-data-breaches/shai-hulud-attack-cyber-firm-crowdsec-github-datatpssgrTue, 22 Sep 2026 10:22:37 GMTDark Reading. Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.Supply chainMalware