‘GitLost’ vulnerability let GitHub’s AI workflows leak private repositories

GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data from private code ...
The Hacker News

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
SecurityWeek

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

Hackers are exploiting a critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10.

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
SecurityWeek

Critical Gitea Flaw Under Active Exploitation, Researchers Warn

Threat actors are exploiting a vulnerability in Gitea’s reverse-proxy authentication mechanism to access internet-accessible instances by supplying only a valid username.