The code hosting platform GitHub has paid out more than $4 million since the launch of its bug bounty program 10 years ago.
The post GitHub Paid Out Over $4 Million via Bug Bounty Program appeared first on SecurityWeek.
Critical Authentication Bypass Resolved in GitHub Enterprise Server
Critical vulnerability in GitHub Enterprise Server allows unauthenticated attackers to obtain administrative privileges.
The post Critical Authentication Bypass Resolved in GitHub Enterprise Server appeared first on SecurityWeek.
Threat Actors Manipulate GitHub Search to Deliver Malware
Checkmarx warns of a new attack relying on GitHub search manipulation to deliver malicious code.
The post Threat Actors Manipulate GitHub Search to Deliver Malware appeared first on SecurityWeek.
GitHub Rolls Out ‘Code Scanning Autofix’ in Public Beta
GitHub’s code scanning autofix delivers remediation suggestions for two-thirds of the identified vulnerabilities.
The post GitHub Rolls Out ‘Code Scanning Autofix’ in Public Beta appeared first on SecurityWeek.
GitHub Rotates Credentials in Response to Vulnerability
GitHub rotates credentials and releases patches after being alerted of a vulnerability affecting GitHub.com and GitHub Enterprise Server.
The post GitHub Rotates Credentials in Response to Vulnerability appeared first on SecurityWeek.
Stolen GitHub Credentials Used to Push Fake Dependabot Commits
Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions.
The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared first on SecurityWeek.
Microsoft AI Researchers Expose 38TB of Data, Including Keys, Passwords and Internal Messages
Exposed data includes backup of employees workstations, secrets, private keys, passwords, and over 30,000 internal Microsoft Teams messages.
The post Microsoft AI Researchers Expose 38TB of Data, Including Keys, Passwords and Internal Messages appeared first on SecurityWeek.
GitHub Enterprise Server Gets New Security Capabilities
GitHub Enterprise Server 3.10 released with additional security capabilities, including support for custom deployment rules.
The post GitHub Enterprise Server Gets New Security Capabilities appeared first on SecurityWeek.
GitHub Announces New Security Improvements
GitHub this week introduced NPM package provenance and deployment protection rules and announced general availability of private vulnerability reporting.
The post GitHub Announces New Security Improvements appeared first on SecurityWeek.
GitHub Rotates Publicly Exposed RSA SSH Private Key
GitHub replaced the RSA SSH private key used to secure Git operations for GitHub.com after it was exposed in a public GitHub repository.
The post GitHub Rotates Publicly Exposed RSA SSH Private Key appeared first on SecurityWeek.
