Wiz Research identified a critical vulnerability (CVE-2026-3854) in GitHub's internal git infrastructure that allows authenticated users to execute arbitrary commands on backend servers with a single git push command. This vulnerability is notable as one of the first critical flaws found in closed-source binaries using AI.

AISLE has identified 38 critical vulnerabilities (CVEs) in healthcare software utilized by 100,000 medical providers. The rapid digitization of healthcare is outpacing the implementation of adequate security measures.

A Lovable-hosted app reportedly exposed the data of 18,000 users due to 16 identified vulnerabilities, including six deemed critical. Lovable asserts that users are responsible for addressing security issues flagged prior to app publication.