GITHUB 24
- GitHub Introduces 3-Day Dependabot Cooldown to Combat Malware
- GitHub-native Command-and-Control Framework OctoC2 Released
- Malicious Go Module Exposes GitHub Malware Lure Network
- GitHub Copilot Sorry Dave, I can't do that harmful thing - unless you ask me in code
- Large-Scale Malware Distribution Campaign on GitHub Uncovered
- GitHub Ends Automatic Install Script Execution for npm
- npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
- Megalodon Chums the Waters in 5.5K+ GitHub Repo Poisonings
- EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
- GitHub Rushed to Fix a Critical Vulnerability in Less Than Six Hours
- GitHub - Katana A Next-Generation Crawling and Spidering Framework
- GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
- RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
- Go Library Maintainer Critiques GitHub's Dependabot as a 'Noise Machine'
- RoguePilot - Exploiting GitHub Copilot for a Repository Takeover
- Red Hat confirms security incident after hackers claim GitHub breach
- GhostAction Supply Chain Attack Compromises 3000+ Secrets
- Salesloft Drift Breach Traced to GitHub Compromise and Stolen OAuth Tokens
- Ransomware Delivered Through GitHub A PowerShell-Powered Attack
- GitHub Abused to Spread Malware Disguised as Free VPN
- Threat actor Banana Squad exploits GitHub repos in new campaign
- Fake Minecraft mods distributed by the Stargazers Ghost Network to steal gamers’ data
- Clone, Compile, Compromise Water Curse’s Open-Source Malware Trap on GitHub
- GitHub Device Code Phishing