ZDNet

GitHub sued for aiding hacking in Capital One breach

Capital One and GitHub have been sued this week as part of a class-action lawsuit filed in California on allegations of failing to secure or prevent a security breach during which the personal details ...
ZDNet

GitHub suspends member over 'mass-assignment' hack

A GitHub member was briefly suspended on Sunday after he exploited a vulnerability in the code repository's systems without first telling GitHub he was going to do so. Egor Homakov's hack caused ...
Newsweek

GitHub ‘Actively Encourages’ Hacking, Suit Filed Against Company After Capital One Hack Says

Lawfirm Tycko & Zavareei LLP has filed a class-action lawsuit against source-code hosting site GitHub for its link to a massive Capital One hack, alleging the company is guilty of negligence, ...
Cyber Daily

Hack without rhythm: Second Shai-Hulud npm campaign ups the stakes

The latest hacking campaign targeting GitHub npm repositories can self-propagate, wipe data, and hide more effectively, ...
CPO Magazine

North Korean Hackers Target Developers with Nearly 200 Malicious NPM Packages in “Contagious Interview” Hacking Campaign

North Korean hackers intensify their efforts against blockchain and Web3 developers, using nearly 200 malicious npm packages ...
Bleeping Computer

Hacker Breaches Syscoin GitHub Account and Poisons Official Client

A hacker gained access to the GitHub account of the Syscoin cryptocurrency and replaced the official Windows client with a version containing malware. The poisoned Syscoin Windows client contained ...
Threat Post

Five OAuth Bugs Lead to Github Hack

A Russian researcher was able to take five low severity OAuth bugs and string them together to create what he calls a “simple but high severity exploit” in Github. A Russian security researcher was ...
ExtremeTech

GitHub hacked, millions of projects at risk of being modified or deleted

Share on Facebook (opens in a new window) Share on X (opens in a new window) Share on Reddit (opens in a new window) Share on Hacker News (opens in a new window) Share on Flipboard (opens in a new ...
Bleeping Computer

GitHub revokes code signing certificates stolen in repo hack

GitHub says unknown attackers have stolen encrypted code-signing certificates for its Desktop and Atom applications after gaining access to some of its development and release planning repositories.
Network World

The aftermath of the Gentoo GitHub hack

Gentoo GitHub hack: What happened? Late last month (June 28), the Gentoo GitHub repository was attacked after someone gained control of an admin account. All access to the repositories was soon ...
Wired

China's 'Great Cannon' could hack anyone, researchers warn

China's recent attack on GitHub and GreatFire.org was carried out using a specially designed offensive system dubbed the "Great Cannon" (GC), researchers say. The attack actively diverted unencrypted ...