GShark The project is based on golang with AdminLTE to build a management system to manage the Github search results. Github API has been utilized to scrawl the related results according to keywords and...
Security researchers have uncovered multiple repositories on GitHub distributing malicious software under the guise of cracked versions of popular software. In a malicious operation dubbed “gitgub,” specialists from the German company G DATA identified...
In 2023, GitHub users inadvertently disclosed approximately 12.8 million credentials and other confidential secrets across more than 3 million public repositories. Cybersecurity experts at GitGuardian, upon investigating this issue, dispatched 1.8 million cautionary emails...
Cybereason has identified a new malware variant named Snake, which proliferates through Facebook messages. This Python-written infostealer is designed to pilfer confidential user data. The stolen data are transmitted across various platforms, including Discord,...
Researchers at Apiiro investigated a widespread campaign of attacks on the GitHub platform using malicious repositories. The experts identified over 100,000 counterfeit repositories, mimicking popular open-source projects to disseminate malware. The number of such...
ReversingLabs has identified two malicious modules in the widely-used NPM package registry, which utilize GitHub to store SSH keys encrypted in Base64 that had previously been pilfered from developers’ systems. The modules, named warbeast2000...
Recently, GitHub rectified a vulnerability, CVE-2024-0200, in its Enterprise Server. This flaw, associated with Unsafe Reflection, permitted malefactors to execute remote code on unprotected servers. It granted access to the environment variables of production...
The trending section of Github Trending will include recent popular projects on Github. For developers, you can find the latest popular projects through the trending page, which is a very good entry for discovering...
GitHub recently extended its secret scanning feature to repositories containing PyPI and RubyGems registry secrets to prevent Ruby and Python developers from inadvertently submitting secrets and credentials to their GitHub repositories. A secret, also...
GitHub recently released its updated community guidelines, explaining how the company will deal with vulnerabilities and malware samples hosted on its services. Security researcher Nguyen Jang uploaded a proof-of-concept (PoC) to GitHub in March,...
GitHub recently announced that users can upload video files in MP4 and MOV formats on issues, pull requests, discussions, and other pages. The addition of this feature will open up new possibilities for GitHub,...
GitHub newly provides support for using FIDO2 security keys when performing SSH Git operations to increase account protection. Two years ago, researchers at North Carolina State University (NCSU) found that after scanning about 13%...
The US government announced two years ago that it would impose trade sanctions on Iran, Crimea, and Syria. This prevented US companies from providing services to users in these regions. At that time, Microsoft’s...
Based on the requirements of the EU General Data Protection Regulations, all websites that provide services to the EU must pop up a prompt to ask users whether to accept tracking when they visit....
Earlier, the Recording Association of America, which represented the recording industry in the United States, submitted a DMCA notice to Github to delete the repository of the well-known open-source project YouTube-dl. According to the...
Recently, Google’s Project Zero only announced the Windows 10 zero-day security vulnerabilities. Although Microsoft has not repaired this security, the flaw relevant details have been disclosed. Once again, Google is now revealing new vulnerabilities....
