Fake GitHub repositories impersonating at least 40 software companies are distributing Rapuncel, an information stealer ...

GitHub Advanced Security released REST API endpoints on September 10 giving enterprise teams programmatic control over ...

Cyber-threat actors stole 170 private repositories using an OAuth token stolen from a former employee through the TanStack ...

New release integrates automated security scanning, AI-powered remediation, and GitHub-native workflows for enterprise development teams. SAN FRANCISCO , CA, UNITED ...

A widespread phishing campaign has targeted nearly 12,000 GitHub repositories with fake "Security Alert" issues, tricking developers into authorizing a malicious OAuth app that grants attackers full ...

GitGuardian found 474 still-valid GitHub App private keys among thousands of exposed credentials, with some carrying ...

Attackers have created hundreds of GitHub repositories that supposedly originate from well-known companies. A link to the “official page” in the Readme leads to a page of the attackers, which ...

The incident where the autonomous AI security research tool "Red Agent" from cloud security firm Wiz autonomously discovered a GitHub Actions workflow vulnerability in Snowflake's official open-source ...

Web developers increasingly rely on Git to manage their source code, but they should also consider the importance of Git repository security. Most web projects today use the Git source code control ...

A clever threat campaign is abusing GitHub repositories to distribute the Lumma Stealer password-stealing malware targeting users who frequent an open source project repository or are subscribed to ...

GitHub Security Advisories are used to distribute vulnerability information in open-source projects and security tools. A new study finds that only a portion of those advisories ever pass through ...

Truffle Security warned that anyone can access repository and fork data on GitHub even after it's deleted, a feature that GitHub confirmed was normal for the platform. In a blog post published on ...