Wiz

Unspecified location – October 19, 2026 -- Wiz Research found a critical vulnerability, CVE-2026-3854, that let any authenticated user execute arbitrary commands on GitHub's backend servers with a single git push command, and 88% of GitHub Enterprise Server instances remained vulnerable at the time of disclosure.

Wiz Research uncovered the flaw on 20 April 2026 in GitHub's internal git infrastructure. It affects both GitHub.com and GitHub Enterprise Server (GHES). The exploit requires only a standard git client.

GitHub.com is fully mitigated; GHES versions up to 3.19.1 stay exposed

GitHub has fully mitigated the issue on GitHub.com, and users there need to take no action. GHES versions up to and including 3.19.1 are vulnerable.

Fixed versions are 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6 and 3.19.3. GitHub released patches for all supported GHES versions, and administrators are urged to upgrade immediately.

Chicago – October 05, 2026 -- Keeper Security now protects more than 100,000 organizations across over 150 countries, the zero-trust identity security vendor announced, building on a year in which it surpassed $240 million in Annual Recurring Revenue (ARR).

Gartner ranks Keeper second-fastest-growing security software vendor in 2025

The customer milestone follows Gartner's recognition of Keeper as the second fastest-growing competitor in the worldwide security software market in 2025. Adoption spans finance, healthcare, telecommunications, manufacturing and the public sector.

"Forward-thinking security leaders are strategically moving beyond disparate, siloed software in favor of a unified identity control plane," said Darren Guccione, CEO and Co-founder of Keeper Security. He said platform consolidation has become "a strategic imperative" as identity emerges as the primary enterprise attack surface.