The Register on MSN

GitHub moves to tighten npm security amid phishing, malware plague

Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing GitHub, which owns the npm registry ...
ZDNet

GitHub security alerts now support PHP projects

Since the Dependency Graph feature is intertwined with the Security Alerts (Vulnerability Alerts) feature, this also means GitHub users will also be eligible to receive automatic security alerts for ...
InfoWorld

GitHub introduces registry for finding MCP servers

GitHub MCP Registry makes Model Context Protocol servers with GitHub repos discoverable from Visual Studio Code.
ZDNet

Programming language security: These are the worst bugs for each top language

If you're a developer writing code in .NET, C++, Java, JavaScript, PHP or Python, new research highlights the main security vulnerabilities you need to watch out for. Static code analysis security ...