A security audit of Git’s source code, backed by Open Source Technology Improvement Fund, revealed several vulnerabilities, including two severe overflow bugs. Given Git’s widespread use in software supply chains, the vulnerabilities may have a significant security impact. One flaw, a memory corruption bug, could enable arbitrary code execution. The bugs could also be exploited to impact servers like GitHub or GitLab. The audit discovered additional issues that could lead to denial-of-service or out-of-bound reads.

“PupkinStealer” A New .NET-Based Malware Steals Browser Credentials & Exfiltrate via Telegram
PupkinStealer is a C# malware that steals sensitive data, including browser credentials and desktop files, using Telegram for stealthy data exfiltration. Discovered in April 2025,