Fake VS Code Alerts on GitHub Spread Malware to Developers A large-scale campaign is targeting developers on GitHub with fraudulent Visual Studio Code (VS Code) security...
GitHub has introduced AI-based scanning to its Code Security tool to broaden vulnerability detection capabilities, going beyond the CodeQL static analysis and encompassing a wider range...
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed credential-stealing malware through official releases and GitHub Actions....
The GlassWorm Supply-Chain Campaign Strikes Again Recently, a coordinated attack by the GlassWorm supply-chain campaign has targeted over 400 code repositories on popular platforms such as...
Former GitHub CEO Raises Record Seed Round for Dev Tool Startup In a groundbreaking move, former GitHub CEO Thomas Dohmke has secured the largest seed funding...
WebRAT Malware Spreading Through Fake Vulnerability Exploits on GitHub The distribution of the WebRAT malware has taken a new turn as it is now being disseminated...
Microsoft made a significant move in 2018 by acquiring GitHub for $7.5 billion, which initially caused anxiety within the developer community. Since then, GitHub has mostly...
Subscribe to our weekly newsletter below and never miss the latest News or an exclusive offer.