Google's Project Zero reveals details of 'high severity' security flaw with Microsoft's GitHub

Security issues are frequently exposed by Google's Project Zero; just days ago, security researchers revealed details of an actively exploited Windows Kernel Cryptography Driver security flaw. Now Project Zero has released details of a serious security flaw in another Microsoft venture -- GitHub. The bug relates to GitHub Actions' workflow commands and is described as being high severity. It was discovered back in July but, as per the standard 90-day disclosure period, details are only just now being made public. See also: How to get the Windows 7 Start menu in Windows 10 Install KB4580364 update to fix Windows 10… [Continue Reading]