Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

Telnyx package compromised on PyPI(aikido.dev)

70 points by overflowy 7 months ago | 25 comments

eBPF Offensive Capabilities – Get Ready for Next-Gen Malware (2023)(sysdig.com)

76 points by password4321 2 years ago | 10 comments

How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments

Ghrc.io appears to be malicious(bmitch.net)

352 points by todsacerdoti 1 year ago | 58 comments

Blog post by Brandon Mitchell reporting that ghrc.io, a typo of GitHub's ghcr.io container registry, appears to steal GitHub credentials.

We found 24 Android vulnerabilities using our open source AI security agent(github.blog)

6 points by fourfire 27 days ago | 2 comments

GitHub Blog post describing how GitHub's open source AI security agent and its taskflows found 24 Android app vulnerabilities, and how to run it yourself.