Hosted on MSN

GitHub is finally tightening up security around npm following multiple attacks

GitHub will enforce 2FA and deprecate legacy tokens to improve package publishing security Trusted Publishing will expand, and token-based publishing will be restricted by default Shai-Hulud worm ...
ZDNet

GitHub now scans for secret leaks in developer workflows

Simple steps can make the difference between losing your online accounts or maintaining what is now a precious commodity: Your privacy. Read now On April 4, the ...
Help Net Security

GitHub revamps bug bounty program with new VIP tier, payout changes

GitHub is changing its bug bounty program to reward higher-quality vulnerability reports and reduce low-effort submissions, including AI-generated reports. The changes will take effect on July 27, ...
InfoWorld

GitHub introduces registry for finding MCP servers

GitHub has launched the GitHub MCP Registry, a curated registry of Model Context Protocol (MCP) servers with repositories on GitHub. The GitHub MCP Registry was launched September 16 with MCP servers ...
Bleeping Computer

GitHub explains the cause behind the past week's outages

GitHub says recent service outages were caused by resource contention issues in their primary database cluster. Since last week, GitHub says that there were four service outages caused by these ...