GitHub Security Lab

Are you in Krakow for EuroPython? Getting started with finding vulnerabilities and securing software can seem daunting, but doesn’t have to be. Join Sylwia Budzynska for “Introduction to security research. Find a CVE with CodeQL.” to learn how to look for vulnerabilities in code and query for them with CodeQL. The workshop is intended for developers interested in security, open source maintainers and security researchers. 📆 Tuesday, 14th July ⏰ 13:45 📌 Kraków, Poland https://ep2026.europython.eu/session/introduction-to-security-research-find-a-cve-with-codeql

AI agents that execute commands, browse the web, and coordinate with other agents are everywhere. But how do you know they're safe? Season 4 of Github's Secure Code Game lets you find out by hacking one yourself. Free, hands-on, and you can get started in under 2 minutes! Learn more in our latest blog. https://github.blog/security/hack-the-ai-agent-build-agentic-ai-security-skills-with-the-github-secure-code-game/

A zero-permission Android app could read every photo, video, voice note, and document in your Signal chats. Downloaded Signal apk directly from Signal.org? You were vulnerable. https://securitylab.github.com/advisories/GHSL-2026-102_Android_SignalApp/