Sign in as anyone: Bypassing SAML SSO authentication with parser differentials(github.blog)282 points by campuscodi 1 year ago | 111 comments
How GitHub gave every repository a durable owner(github.blog)76 points by ascertain 3 months ago | 25 comments
Gaining kernel code execution on an MTE-enabled Pixel 8(github.blog)277 points by gulced 2 years ago | 46 comments
Restructuring GitHub's bug bounty program(github.blog)47 points by soheilpro 3 months ago | 22 comments
How to Get Remote Code Execution in Kafka UI(github.blog)39 points by jandeboevrie 2 years ago | 3 comments