Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.
After the CISA GitHub leak, the agency published a candid incident postmortem. Here are six lessons security teams should copy, from secrets scanning to key rotation.
Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...
A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
GitHub Copilot VS Code browser tools are now generally available and enabled by default for all paid Copilot subscribers. The ...
Former GitHub CEO Thomas Dohmke's startup Entire is rolling out a distributed network for mirroring code repositories, making ...
GitHub also launches Codex as an agent provider in JetBrains IDEs and rolls out AI credit pools giving enterprise admins ...
Research shows signed Git commits can be re-encoded into fresh GitHub Verified hashes without changing files or breaking ...
Weak security controls around the use of public GitHub code repositories allowed a contractor for the Cybersecurity and ...
In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
Alan Turing Institute researchers made GitHub Copilot produce harmful content it refuses in chat, by spreading the request across a coding workflow.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results