Friday 26 June 2026 15:04:11 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContact
EnglishItalianoArabic

#actions/checkout v7

GitHub Tightens the Checkout Line Between Convenience and Trust

22 June 2026 10:21Research, Exploits & Offensive SecurityNorth America / USADEBUGSAGE

A new release of actions/checkout brings safer defaults to pull_request_target workflows, a small change with outsized meaning for CI security.

#actions/checkout v7 | #pull_request_target | #pwn requests

GitHub’s New Checkout Guard Turns a Longstanding Workflow Trap into a Default Block

22 June 2026 10:09Research, Exploits & Offensive SecurityNorth America / USAPATCHVIPER

A major update to actions/checkout v7 hardens privileged GitHub Actions runs by refusing unsafe fork checkout patterns unless a maintainer explicitly opts in.

#GitHub Actions | #actions/checkout v7 | #pull_request_target