A zero-permission Android app could read every photo, video, voice note, and document in your Signal chats. Downloaded Signal apk directly from Signal.org? You were vulnerable. https://securitylab.github.com/advisories/GHSL-2026-102_Android_SignalApp/
Remote
GitHub Security Lab
@GitHubSecurityLab@infosec.exchange
mastodon 4.8.0-alpha.3+glitch0 Followers
0 Following
4 Posts
Joined November 04, 2022
AI agents that execute commands, browse the web, and coordinate with other agents are everywhere. But how do you know they're safe? Season 4 of Github's Secure Code Game lets you find out by hacking one yourself. Free, hands-on, and you can get started in under 2 minutes! Learn more in our latest blog. https://github.blog/security/hack-the-ai-agent-build-agentic-ai-security-skills-with-the-github-secure-code-game/
Are you in Krakow for EuroPython? Getting started with finding vulnerabilities and securing software can seem daunting, but doesn’t have to be. Join Sylwia Budzynska for “Introduction to security research. Find a CVE with CodeQL.” to learn how to look for vulnerabilities in code and query for them with CodeQL. The workshop is intended for developers interested in security, open source maintainers and security researchers.
📆 Tuesday, 14th July
⏰ 13:45
📌 Kraków, Poland
https://ep2026.europython.eu/session/introduction-to-security-research-find-a-cve-with-codeql
If you could secure your open source GitHub repo in less than 60 seconds, would you do it?
🚀 Introducing gh secure
One command. Free. No security expertise required.
gh.io/gh-secure