Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could...
public
GitHub Automatically Holds Suspicious Actions Runs, but Repository Owners Must Approve Them
GitHub is adding a human checkpoint before certain suspicious Actions workflows can run in public repositories. The company announced on...
NodeBB Patches Eight AI-Found Flaws Exposing Admin Access and Private Chats
Swati KhandelwalJul 24, 2026Web Security / Vulnerability Eight security flaws in NodeBB went public on Wednesday, along with the code...
GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier
Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical...
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
Swati KhandelwalJun 29, 2026Vulnerability / Open Source A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2...
Maine forced to take down data breach portal after fake notices filed with authorities
The US state of Maine has taken its public data breach notification portal offline after someone submitted fraudulent breach disclosures...
Minimus Unveils New Supply Chain Protection Proxy and Command-Line Interface for Container Management
In tandem, Minimus has launched minicli, a public command-line tool downloadable for macOS and Linux (AMD and ARM). The utility...
FBI warns students and staff that ShinyHunters may come knocking after Canvas breach
When the FBI puts out a public service announcement that deliberately appears to avoid naming the company at the centre...
AdvancedHEALTH Ransomware Claim Includes 2.3M Patient Data Lines
A ransomware gang is trying to turn a Tennessee healthcare group into a public pressure campaign. DragonForce claims it stole...
FBI Links Cybercriminals to Sharp Surge in Cargo Theft Attacks
What happened The FBI issued a public service announcement on April 30, 2026, warning the US transportation and logistics industry...
A History of Global Hacking — and Where It’s Going Next
In the midst of recent battles with Iran and their global partners, U.S. public- and private-sector organizations are also battling...
ClickUp Data Leak Exposes Enterprise Emails for Over a Year
Image: dwifitrianor/Adobe A hardcoded API key embedded in ClickUp’s public website has quietly exposed hundreds of corporate and government email...
New Federal Strategies, Rising Risk From Iran Top Cyber Themes
Lohrmann on Cybersecurity When cybersecurity experts from the public and private sectors gathered this week, AI and critical infrastructure...
Anthropic CEO Calls OpenAI’s Military Messaging ‘Straight Up Lies’
Image: TechCrunch Anthropic CEO Dario Amodei is accusing OpenAI of misleading the public about its defense work, an unusually direct...
