The GitHub Blog: Security News and Updates

站点链接：https://github.blog/category/security/

The GitHub Blog: Security News and Updates 2025-04-11 application security · security · code security 阅读缓存

How we’re making security easier for the average developer

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-04-10 maintainers · open source · security 阅读缓存

How to request a change to a CVE record

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-04-09 application security · security · code security 阅读缓存

Found means fixed: Reduce security debt at scale with GitHub security campaigns

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-04-04 application security · security · github security lab 阅读缓存

Localhost dangers: CORS and DNS rebinding

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-04-02 application security · security · github advanced security 阅读缓存

GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-03-25 security · supply chain security · vulnerability research 阅读缓存

A maintainer’s guide to vulnerability disclosure: GitHub tools to make it simple

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-03-13 security · vulnerability research · authentication 阅读缓存

Sign in as anyone: Bypassing SAML SSO authentication with parser differentials

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-03-11 security 阅读缓存

Full exposure: A practical approach to handling sensitive data leaks

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-02-13 engineering · security · ci/cd 阅读缓存

How GitHub uses CodeQL to secure GitHub

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-02-08 security · ghas 阅读缓存

From finding to fixing: GitHub Advanced Security integrates Endor Labs SCA

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-01-30 security · vulnerability research · application security 阅读缓存

Cybersecurity researchers: Digital detectives in a connected world

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-01-23 security · vulnerability research · exploit development 阅读缓存

Attacks on Maven proxy repositories

收藏阅读缓存
The GitHub Blog: Security News and Updates 2025-01-10 application security · security · codeql 阅读缓存

How to secure your GitHub Actions workflows with CodeQL

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-12-24 security · vulnerability research · codeql 阅读缓存

Announcing CodeQL Community Packs

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-12-17 security · vulnerability research · fuzzing 阅读缓存

Uncovering GStreamer secrets

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-12-11 security · vulnerability research · code scanning 阅读缓存

CodeQL zero to hero part 4: Gradio framework case study

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-10-25 security · vulnerability research · github security lab 阅读缓存

Attacking browser extensions

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-10-25 security · vulnerability research · bug bounty 阅读缓存

Cybersecurity spotlight on bug bounty researcher @adrianoapj

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-10-22 security · supply chain security · cve 阅读缓存

Securing the open source supply chain: The essential role of CVEs

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-10-09 security · supply chain security · cli 阅读缓存

The second half of software supply chain security on GitHub

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-10-02 security · vulnerability research · bug bounty 阅读缓存

Cybersecurity spotlight on bug bounty researcher @imrerad

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-09-27 security · vulnerability research · bug bounty 阅读缓存

Kicking off Cybersecurity Awareness Month: Researcher spotlights and additional incentives!

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-08-13 security · vulnerability research · chrome 阅读缓存

From object transition to RCE in the Chrome renderer

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-07-31 security · supply chain security · cloud-native 阅读缓存

Configure GitHub Artifact Attestations for secure cloud-native delivery

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-07-22 security · vulnerability research · github security lab 阅读缓存

3 ways to get Remote Code Execution in Kafka UI

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-06-27 security · exploit development · github security lab 阅读缓存

Attack of the clones: Getting RCE in Chrome’s renderer with duplicate object properties

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-06-20 security · github security lab · ruby 阅读缓存

Execute commands by sending JSON? Learn how unsafe deserialization vulnerabilities work in Ruby projects

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-06-12 security · bug bounty 阅读缓存

10 years of the GitHub Security Bug Bounty Program

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-05-10 security · ai insights · codeql 阅读缓存

How AI enhances static application security testing (SAST)

收藏阅读缓存
The GitHub Blog: Security News and Updates 2024-05-03 security · cli · github actions 阅读缓存

Introducing Artifact Attestations–now in public beta

收藏阅读缓存