Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

GitHub Security Lab

@GitHubSecurityLab@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

https://securitylab.github.com/

0 Followers
0 Following
4 Posts
Joined November 04, 2022
Verification:
https://raw.githubusercontent.com/github/securitylab/main/mastodon/verifications.html
Open post
GitHub Security Lab @GitHubSecurityLab@infosec.exchange
· 6mo ago

A zero-permission Android app could read every photo, video, voice note, and document in your Signal chats. Downloaded Signal apk directly from Signal.org? You were vulnerable. https://securitylab.github.com/advisories/GHSL-2026-102_Android_SignalApp/

GHSL-2026-102: Unauthorized exfiltration of decrypted attachments in Signal through Intent redirection
GitHub Security Lab

GHSL-2026-102: Unauthorized exfiltration of decrypted attachments in Signal through Intent redirection

Versions >= v6.38.0 and < v8.4.2 of the website flavor of Signal for Android (distributed at https://signal.org/android/apk) allow another installed app without any permissions to exfiltrate decrypted attachments (photos, videos, documents, voice notes) by exploiting Intent redirection, potentially exposing sensitive user data.

3
0
4
0
Open post
GitHub Security Lab @GitHubSecurityLab@infosec.exchange
· 6mo ago

AI agents that execute commands, browse the web, and coordinate with other agents are everywhere. But how do you know they're safe? Season 4 of Github's Secure Code Game lets you find out by hacking one yourself. Free, hands-on, and you can get started in under 2 minutes! Learn more in our latest blog. https://github.blog/security/hack-the-ai-agent-build-agentic-ai-security-skills-with-the-github-secure-code-game/

Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
The GitHub Blog

Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game

Learn to find and exploit real-world agentic AI vulnerabilities through five progressive challenges in this free, open source game that over 10,000 developers have already used to sharpen their security skills.

1
0
1
0
Open post
GitHub Security Lab @GitHubSecurityLab@infosec.exchange
· 3mo ago
Are you in Krakow for EuroPython? Getting started with finding vulnerabilities and securing software can seem daunting, but doesn’t have to be. Join Sylwia Budzynska for “Introduction to security research. Find a CVE with CodeQL.” to learn how to look for vulnerabilities in code and query for them with CodeQL. The workshop is intended for developers interested in security, open source maintainers and security researchers. 📆 Tuesday, 14th July ⏰ 13:45 📌 Kraków, Poland https://ep2026.europython.eu/session/introduction-to-security-research-find-a-cve-with-codeql
Introduction to security research. Find a CVE with CodeQL.
EuroPython 2026

Introduction to security research. Find a CVE with CodeQL.

Learn how to find security vulnerabilities at Introduction to security research. Find a CVE with CodeQL tutorial

0
0
1
0
Open post
GitHub Security Lab @GitHubSecurityLab@infosec.exchange
· 2w ago
If you could secure your open source GitHub repo in less than 60 seconds, would you do it? 🚀 Introducing gh secure One command. Free. No security expertise required. gh.io/gh-secure
0
1
1
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Pricing
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 13:48:28 UTC