Data Protection
A security researcher has discovered hundreds of leaked secrets by restoring files deleted from GitHub repositories.
Hi, what are you looking for?
SecurityWeek
All posts tagged "GitHub"
Application Security
GitHub security campaigns make it easier for developers and security teams to collaborate on fixing vulnerabilities in their applications.
Data Protection
GitHub has announced new capabilities to help organizations and developers keep secrets in their code protected.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Application Security
The tj-actions/changed-files GitHub Action, which is used in 23,000 repositories, has been targeted in a supply chain attack.
Application Security
GitHub has launched a $1.25 million fund to be invested in improving the security of 125 open source projects.
Cybercrime
GoIssue is a new tool for cybercriminals that allows attackers to extract email addresses from GitHub profiles and send bulk emails to users.
Vulnerabilities
A critical-severity flaw in GitHub Enterprise Server could lead to unauthorized access to the vulnerable instances.
Identity & Access
GitHub patches a trio of security defects in the GitHub Enterprise Server product and recommends urgent patching for corporate users.
Vulnerabilities
Misconfigurations and security bugs lead to GitHub Actions artifacts exposing tokens for third party cloud services and GitHub repositories.
Application Security
GitHub has made AI-powered Copilot Autofix generally available to help developers fix code vulnerabilities faster.
Malware & Threats
Stargazer Goblin has created a network of over 3,000 GitHub accounts to distribute malware through phishing repositories.
Artificial Intelligence
A team of former GitHub engineers has secured $20 million in venture capital funding to build AI-powered security tools.
Vulnerabilities
The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago.
Vulnerabilities
Critical vulnerability in GitHub Enterprise Server allows unauthenticated attackers to obtain administrative privileges.
Malware & Threats
Checkmarx warns of a new attack relying on GitHub search manipulation to deliver malicious code.
Application Security
GitHub’s code scanning autofix delivers remediation suggestions for two-thirds of the identified vulnerabilities.
Vulnerabilities
GitHub rotates credentials and releases patches after being alerted of a vulnerability affecting GitHub.com and GitHub Enterprise Server.
Application Security
Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.
Artificial Intelligence
Exposed data includes backup of employees workstations, secrets, private keys, passwords, and over 30,000 internal Microsoft Teams messages.
Malware & Threats
The DanaBot botnet ensnared over 300,000 devices and caused more than $50 million in damages before being disrupted.
Incident Response
Vulnerabilities
Incident Response
Management & Strategy
Noteworthy stories that might have slipped under the radar: serious vulnerabilities found in a Volkswagen app, Australian hacker DR32 sentenced in the US, and...
Threat Intelligence
Cybercrime
Malware & Threats
