A large-scale operation dubbed 'FakeGit' is pushing SmartLoader and StealC malware through 7,600 malicious GitHub ...

Attackers abuse compromised GitHub repos and hosted runners to target cPanel and WHM via CVE-2026-41940, using 583 workflows ...

GitHub now automatically holds suspicious Actions workflows in public repositories, but maintainers must still review ...

Researchers uncover 7,600 FakeGit GitHub repos, including 800 AI skills and MCP lures spreading SmartLoader malware.

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to ...

GitHub Actions security enforcement went live today: actions/checkout now refuses by default to execute untrusted fork code ...

GitHub's supply chain defense map catalogs nine shipped controls across npm and GitHub Actions — covering pwn-request ...

India's attempt to remove GitHub repositories for Jack Dorsey's Bluetooth-powered messaging app, Bitchat, has ignited debate ...

Osaurus, the native macOS harness for running AI agents locally on the Mac.

India's cybercrime agency gave GitHub three hours to disable three Bitchat repositories, testing whether governments can ...

Bitchat downloads surged 32x in India as internet shutdowns fueled adoption while government takedown efforts sparked legal ...

India ordered GitHub to remove Jack Dorsey's Bitchat repositories, citing national security and anonymous offline messaging ...