On September 5, 2025, GitGuardian discovered GhostAction, a massive supply chain attack affecting 327 GitHub users across 817 ...

Cybercriminals are faking security alerts on GitHub to get unsuspecting users to install malicious applications and lose their work, experts have warned.

The GitHub OAuth attack exposed a security blind spot in the ever-growing web of permissions spanning developers, service ...

New security dashboard works as a single pane of glass with Opsera's broader GitHub offerings SAN FRANCISCO, May 1, 2025 /PRNewswire/ -- Opsera, the AI-powered DevOps platform trusted by top ...

Platform's staffer complains security review was 'rushed' Microsoft-owned collaborative coding platform GitHub is deepening ...

Researchers from Cisco’s Talos security team have uncovered a malware-as-a-service operator that used public GitHub accounts as a channel for distributing an assortment of malicious software to ...

GitHub is rolling out a new feature to not only help developers find vulnerabilities, but fix them quickly. Copilot Autofix in GitHub Advanced Security (GHAS) analyzes vulnerabilities, explains ...

Microsoft announced the general availability of GitHub Advanced Security for Azure DevOps, allowing users to integrate code, secret, and dependency scanning into their Azure Repos and benefit from ...

Security teams can adds risks that need to be addressed to a security campaign, which is then shared with developers who are impacted.

A series of malicious GitHub repositories masquerading as legitimate security research projects have been discovered. VulnCheck researcher Jacob Baines shared the findings in a new advisory published ...

GitHub says that unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning ...

GitHub has announced that its secret scanning alerts service is now generally available to all public repositories and can be enabled to detect leaked secrets across an entire publishing history.