An extortion group calling itself the Crimson Collective claims to have stolen nearly 570GB of compressed data across 28,000 internal development respositories, with the company confirming it was a ...

OS users are being tricked in the ongoing campaign with fake GitHub pages that deliver the Atomic infostealer.

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the open-source software supply chain.

The company is bringing its AI coding agent directly to the terminal with native GitHub integration, agentic capabilities, and full developer control.

GitHub is introducing a set of defenses against supply-chain attacks on the platform that led to multiple large-scale incidents recently.

In the light of recent supply chain attacks targeting the NPM ecosystem, GitHub will implement tighter authentication and publishing rules.

GhostAction attack stole 3,325 secrets from 327 GitHub accounts GitGuardian helped shut it down and alerted affected projects A separate NPM attack hit 2,000 accounts but was unrelated Thousands of ...

Following a number of recent high-profile attacks and hacking attempts, GitHub has decided to make substantial changes to the security of its platform. In a blog post, GitHub detailed changes to ...

GitHub rolled out several updates this week aimed at developer collaboration, open source security and enterprise billing.