Become a Computing member

Google researchers disclose high-severity vulnerability affecting GitHub

03 November 2020 • 3 min read

The bug makes GitHub Action's workflow commands vulnerable to injection attacks, according to researchers

Google's Project Zero researchers have disclosed a high-severity vulnerability in GitHub, which, they say, could allow attackers to remotely execute code on affected systems. The bug was discove...

To continue reading this article...

Join Computing

Unlimited access to real-time news, analysis and opinion from the technology industry
Receive important and breaking news in our daily newsletter
Be the first to hear about our events and awards programmes
Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
Access to the Computing Delta hub providing market intelligence and research
Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Already a Computing member?

Previous Article

Peter Cochrane: Where are the generalists we need today?

Next Article

AWS signs three-year cloud deal with the UK government

You may also like

'Levelling up cybersecurity is a team effort,' says Jacob DePriest of GitHub

Open Source

'Levelling up cybersecurity is a team effort,' says Jacob DePriest of GitHub

But security starts with developers, and AI isn’t going to replace them

09 May 2024 • 5 min read

NHS England reinstates open source Github page used to maintain central database of GP data

Health

NHS England reinstates open source Github page used to maintain central database of GP data

GP Connect page taken down, then reinstated, over 'inaccurate' patient record database claim

19 March 2024 • 3 min read

Massive data leak exposes Chinese infosec vendor's cyberattacks-for-hire

Threats and Risks

Massive data leak exposes Chinese infosec vendor's cyberattacks-for-hire

Documents outline the use of hardware hacking devices, including a malicious power bank designed to surreptitiously upload data into victims' systems

23 February 2024 • 3 min read

Author spotlight

Dev Kundaliya

More from Dev Kundaliya

BreachForums website seized in international operation

OpenAI prioritising 'shiny products' over safety, says departing researcher

More on Threats and Risks

Deepfake fraud costs engineering giant Arup £20m

Threats and Risks

Deepfake fraud costs engineering giant Arup £20m

An employee was tricked into participating in a video conference, featuring a digitally recreated version of the CFO

20 May 2024 • 2 min read

Russian criminals use Lunar malware to breach European government agency

Threats and Risks

Russian criminals use Lunar malware to breach European government agency

Attackers thought to be part of Russia's FSB

17 May 2024 • 2 min read

Microsoft May Patch Tuesday fixes two actively exploited zero days

Threats and Risks

Microsoft May Patch Tuesday fixes two actively exploited zero days

Microsoft has fixed 60 Windows CVEs in its May Patch Tuesday update, two of which are actively exploited zero days. One is a critical vulnerability, earning an 8.8 CVSS rating.

John Leonard

15 May 2024 • 3 min read

Delta