GIGAZINE

Malware appears that uses GitHub notification emails to trick users into thinking they are from the security team

Ian Spence, an open source software (OSS) developer, reported in a blog post the existence of malware that exploits GitHub notification emails. GitHub Notification Emails Hijacked to Send Malware - ...
The Next Web

Turkey blocks Google Drive, Dropbox, OneDrive and GitHub to stop email leaks [Updated]

Turkey reportedly blocked cloud storage services including Google Drive, Dropbox and Microsoft’s OneDrive, as well as code hosting service GitHub on Saturday, according to Turkey Blocks. The ...
The Verge

GitHub will keep selling software to ICE, leaked email says

Microsoft-owned GitHub will renew a $200,000 contract with Immigration and Customs Enforcement, despite concerns about the Trump administration’s policies, according to a leaked email. GitHub CEO Nat ...
The Hacker News

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

GitHub notifications abused to impersonate Y Combinator for crypto theft

A massive phishing campaign targeted GitHub users with cryptocurrency drainers, delivered via fake invitations to the Y ...