GitHub Investigates Internal Repository Security Breach
633
GitHub is investigating unauthorized access to its internal repositories but reports no current impact on customer data.
Security Disclosure
Covers policies, practices, and debates around how software vulnerabilities are disclosed, including coordinated disclosure, embargoes, and responsible reporting norms.
Reading List
Ramp Fixes AI Spreadsheet Data Exfiltration Flaw
128
Ramp's Sheets AI was vulnerable to a prompt injection attack that allowed malicious formulas to exfiltrate private financial data without user approval.
OpenClaw Fixes High-Severity Privilege Escalation Vulnerability
502
OpenClaw version 2026.3.28 fixes a critical authorization flaw that allowed users to escalate their privileges to admin via the device pairing process.
Unredacted Disclosure: Critical Jailbreak and Sandbox Vulnerabilities in Claude 4.6 Models
A security researcher has publicly disclosed critical jailbreak and data exfiltration vulnerabilities in Anthropic's Claude models following the company's failure to respond to private reports.
The Death of the Security Embargo: Navigating the Kernel's Bug Surge
313
A massive influx of valid security reports is ending the era of secret embargoes and forcing a shift toward continuous software maintenance.