Security News

A GitHub API token leaked from Homebrew’s Jenkins provided a security researcher with access to core Homebrew software repositories (repos). read more

What just befell a "small" piece of SnapChat’s source code, and should users be concerned?

The source code of the popular social media app Snapchat was recently surfaced online after a hacker leaked and posted it on the Microsoft-owned code repository GitHub. A GitHub account under the...

In a move to protect its users, software repository site GitHub is now alerting account holders whenever it detects that a password has been compromised in breaches on other services. read more

GitHub has announced that its recently introduced feature for alerting developers about known vulnerabilities in software packages that their projects depend on will now also work for Python...

Third language added to security scanner GitHub's added Python to the list of programming languages it can auto-scan for known vulnerabilities.…

GitHub announced on Thursday that developers will be warned if the Python packages used by their applications are affected by known vulnerabilities. read more

Maintainers of the Gentoo Linux distribution have now revealed the impact and "root cause" of the attack that saw unknown hackers taking control of its GitHub account last week and modifying the...

Weak password, no 2FA, loose policies ... and only luck limited the damage The developers of Gentoo Linux have revealed how it was possible for its GitHub organization account to be hacked:...

read more