Private and deleted GitHub repositories are not as secure as users might assume. Data from deleted forks, deleted repositories, and private repositories can still be accessed, often indefinitely. This ...

Millions of enterprise software repositories on GitHub are vulnerable to repojacking, a relatively simple kind of software supply chain attack where a threat actor redirects projects that are ...

Millions of GitHub repositories may be vulnerable to dependency repository hijacking, also known as "RepoJacking," which could help attackers deploy supply chain attacks impacting a large number of ...

GitHub, the popular site for managing software development projects, is now also a lightweight project management service, thanks to a new feature. The company launched Projects on Wednesday, which is ...

Cyberattackers in just the last few months have registered more than 100,000 — but by some estimates more than a million — malicious copycat repositories on GitHub. The "repo confusion" scheme is ...

Gitrob, an open source intelligence tool, helps security analysts search Github organization repositories for files not meant for public consumption. Free online code repositories such as GitHub ...