Private and deleted GitHub repositories are not as secure as users might assume. Data from deleted forks, deleted repositories, and private repositories can still be accessed, often indefinitely. This ...

As GitHub’s first chief security officer, Mike Hanley has the mammoth task of overseeing all things security across the organisation, from corporate IT security and compliance to the security of its ...

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More GitHub is opening the GitHub Advisory Database to community submissions, ...

Today, at the GitHub Universe developer conference, GitHub announced the launch of a new community program called Security Lab that brings together security researchers from different organizations to ...

On September 5, 2025, GitGuardian discovered GhostAction, a massive supply chain attack affecting 327 GitHub users across 817 ...

GitHub has added support for securing SSH Git operations using FIDO2 security keys for added protection from account takeover attempts. Researchers at North Carolina State University (NCSU) found [PDF ...

GitHub has launched an initiative aimed at enhancing trust and security in open-source software. The GitHub Secure Open Source Fund, part of its Accelerator programme, is providing $1.25M in funding ...

A supply chain attack involving malicious GitHub Action workflows has impacted hundreds of repositories and thousands of secrets.

Code hosting service GitHub has updated its platform this week, and among the many developer-centric changes, the company also rolled out three new security features for project owners. The most ...

GitHub is rolling out new tools to help developers on its platform avoid security blunders. Over 99% of security incidents on GitHub stem from developer mistakes, a product head told Insider. GitHub ...