Application Security
GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.
Hi, what are you looking for?
SecurityWeek
All posts tagged "GitHub"
Cybercrime
GoIssue is a new tool for cybercriminals that allows attackers to extract email addresses from GitHub profiles and send bulk emails to users.
Vulnerabilities
A critical-severity flaw in GitHub Enterprise Server could lead to unauthorized access to the vulnerable instances.
Identity & Access
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users.
Vulnerabilities
Misconfigurations and security bugs lead to GitHub Actions artifacts exposing tokens for third party cloud services and GitHub repositories.
Application Security
GitHub has made AI-powered Copilot Autofix generally available to help developers fix code vulnerabilities faster.
Malware & Threats
Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories.
Artificial Intelligence
A team of former GitHub engineers has secured $20 million in venture capital funding to build AI-powered security tools.
Vulnerabilities
The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago.
Vulnerabilities
Critical vulnerability in GitHub Enterprise Server allows unauthenticated attackers to obtain administrative privileges.
Malware & Threats
Checkmarx warns of a new attack relying on GitHub search manipulation to deliver malicious code.
Application Security
GitHub’s code scanning autofix delivers remediation suggestions for two-thirds of the identified vulnerabilities.
Data Breaches
In 2024 organizations informed the US government about 585 healthcare data breaches affecting a total of nearly 180 million user records.
Vulnerabilities
Malware & Threats
Phishing
Noteworthy stories that might have slipped under the radar: several multi-million dollar settlements, CrowdStrike-themed phishing emails, and MITRE launches D3FEND 1.0.
Data Breaches
Application Security
