NewsThe Hacker News
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More
More on GitHub
Other advisories
- MediumCVE-2026-123369compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
- HighCVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartext
- HighCVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartext
- Not ratedosv:CVE-2026-102289zizmor: Debug logging prints available GitHub credentials in cleartext
- Not ratedosv:CVE-2026-63644bird-lg-go: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') and Exposure of Sensitive Information to an Unauthorized Actor in github.com/xddxdd/bird-lg-go
- Not ratedosv:CVE-2026-123369compose-lint: Compose file text can issue GitHub Actions workflow commands through the compose-lint Action
- HighCVE-2026-124621Kongxin-github Java_Library_Management_System: fehlerhafte Rechtevergabe
- Not ratedosv:CVE-2026-124621kongxin-github Java_Library_Management_System Swing UI Layer MainInterface.java Landing.sureadmin improper authorization
Other news entries
- Binance Warns of iOS Sandbox Escape That Could Expose Crypto Wallet Keys, No Fix ConfirmedNewsThe Hacker News
- Claude Code is accidentally exposing secrets all over GitHubNewsArs Technica — Security
- Tensorlake: attacker reached engineering GitHub via vendor-hosted sandboxes after unrotated env varsBreachpwn.watch
- Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubNewsThe Hacker News
- Agents reveal secrets when offered to team up with each otherNewsThe Register — Security
- Fake security tools on GitHub push backdoors and infostealersNewsBleepingComputer
- Threat actors use agentic AI tooling to find and abuse exposed secretsNewsMicrosoft Threat Intelligence
- Microsoft GitHub Enterprise Server: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
Source: https://thehackernews.com/2026/06/weekly-recap-instagram-account-hacks.html
ID