Latest GitHub news

GitHub can now alert of supply-chain bugs in new dependencies

GitHub can now block and alert you of pull requests that introduce new dependencies impacted by known supply chain vulnerabilities.
- Sergiu Gatlan
- April 08, 2022
- 02:00 PM
- 0
GitHub can now auto-block commits containing API keys, auth tokens

GitHub announced on Monday that it expanded its code hosting platform's secrets scanning capabilities for GitHub Advanced Security customers to automatically block secret leaks.
- Sergiu Gatlan
- April 04, 2022
- 03:32 PM
- 0
GitHub explains the cause behind the past week's outages

GitHub says recent service outages were caused by resource contention issues in their primary database cluster.
- Lawrence Abrams
- March 24, 2022
- 10:55 AM
- 0
Adafruit discloses data leak from ex-employee's GitHub repo

Adafruit has disclosed a data leak that occurred due to a publicly-viewable GitHub repository. The company suspects this could have allowed "unauthorized access" to information about certain users on or before 2019.
- Ax Sharma
- March 06, 2022
- 06:16 AM
- 0
GitHub code scanning now finds more security vulnerabilities

Code hosting platform GitHub today launched new machine learning-based code scanning analysis features that will automatically discover more common security vulnerabilities before they end up in production.
- Sergiu Gatlan
- February 17, 2022
- 02:47 PM
- 0
GitHub outage impacts Actions, Codespaces, Issues, Pull Requests

GitHub is currently down, affected by a worldwide outage preventing access to the website, issuing commits, cloning projects, or performing pull requests.
- Lawrence Abrams
- February 02, 2022
- 02:27 PM
- 0
Microsoft Sentinel adds threat monitoring for GitHub repos

Microsoft says its cloud-native SIEM (Security Information and Event Management) platform now allows to detect potential ransomware activity using the Fusion machine learning model.
- Sergiu Gatlan
- February 02, 2022
- 11:29 AM
- 0
Firefox Relay gets added to disposable email blocklist, angers users

The maintainers of a "disposable email service" blocklist have decided to add Firefox Relay to the list, leaving many users of the service upset. Firefox Relay is a privacy-centric email service that enables users to protect their real email addresses and hence limit spam.
- Ax Sharma
- January 17, 2022
- 02:33 PM
- 4
npm dependency is breaking some React apps today — here's the fix

Tons of users are reporting their Facebook Create React App builds are failing since yesterday. The cause has been traced down to a dependency used by create-react-app, the latest version of which is breaking developers' apps.
- Ax Sharma
- January 15, 2022
- 12:35 PM
- 0
Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps

Users of popular open-source libraries 'colors' and 'faker' were left stunned after they saw their applications, using these libraries, printing gibberish data and breaking. Some surmised if the NPM libraries had been compromised, but it turns out there's more to the story.
- Ax Sharma
- January 09, 2022
- 09:17 AM
- 32
NPM fixes private package names leak, serious authorization bug

The largest software registry of Node.js packages, npm, has disclosed fixing multiple security flaws. The first flaw concerns leak of names of private npm packages on the npmjs.com's "replica" server. Whereas, the second flaw allows attackers to publish new versions of any existing npm package that they do not own or have rights to.
- Ax Sharma
- November 16, 2021
- 07:43 AM
- 0
GitHub revokes duplicate SSH auth keys linked to library bug

GitHub has revoked weak SSH authentication keys generated using a library that incorrectly created duplicate RSA keypairs.
- Lawrence Abrams
- October 11, 2021
- 04:12 PM
- 0
GitHub finds 7 code execution vulnerabilities in 'tar' and npm CLI

GitHub security team has identified several high-severity vulnerabilities in npm packages, "tar" and "@npmcli/arborist," used by npm CLI. The tar package receives 20 million weekly downloads on average, whereas arborist gets downloaded over 300,000 times every week.
- Ax Sharma
- September 08, 2021
- 11:37 PM
- 0
GitHub urges users to enable 2FA after going passwordless

GitHub is urging its user base to toggle on two-factor authentication (2FA) after deprecating password-based authentication for Git operations.
- Sergiu Gatlan
- August 18, 2021
- 02:00 PM
- 0
GitHub deprecates account passwords for authenticating Git operations

GitHub has announced today that account passwords will no longer be accepted for authenticating Git operations starting tomorrow.
- Sergiu Gatlan
- August 12, 2021
- 06:10 PM
- 1
Learn how to deploy cloud apps with 98 hours of GitOps training

The 2021 Ultimate GitOps Certification Bundle helps you break into this lucrative niche, with 11 full-length video courses packed with information. It's worth $2,200, but you can get the bundle today for only $34.99
- BleepingComputer Deals
- June 17, 2021
- 07:23 AM
- 0
GitHub now scans for accidentally-exposed PyPI, RubyGems secrets

GitHub has recently expanded its secrets scanning capabilities to repositories containing PyPI and RubyGems registry secrets. The move helps protect millions of applications built by Ruby and Python developers who may inadvertently be committing secrets and credentials to their public GitHub repos.
- Ax Sharma
- June 09, 2021
- 03:24 AM
- 0
GitHub's new policies allow removal of PoC exploits used in attacks

GitHub announced on Friday their updated community guidelines that explain how the company will deal with exploits and malware samples hosted on their service.
- Lawrence Abrams
- June 05, 2021
- 12:56 PM
- 2
GitHub now supports security keys when using Git over SSH

GitHub has added support for securing SSH Git operations using FIDO2 security keys for added protection from account takeover attempts.
- Sergiu Gatlan
- May 10, 2021
- 04:09 PM
- 0
GitHub disables Google FLoC user tracking on its website

GitHub has announced rolling out a mysterious HTTP header on all GitHub Pages sites to block Google FLoC tracking.
- Ax Sharma
- April 28, 2021
- 01:25 AM
- 4