#githubsecurity Etiketinde En Popüler Paylaşımlar
漏えい鍵の警告、閉じれば安全？
判断軸は鍵の有効性。Activeなら発行元で失効・再発行。Unknownなら発行元で確認。Closedは鍵の失効を意味しない。
まずPublic monitoringの状態欄を見る。GitHub Enterprise Cloudの公開プレビュー向け。#GitHubSecurity
🔵 NEWS: "GitHub phishing" — attackers upload fake wallet recovery scripts. Victims run them — malware infects. ONLY use official tools from verified repositories.
#GitHubSecurity #Phishing #CryptoSecurity
Researchers at Noma Security found a GitHub issue can trick workflows into leaking private repo data with no stolen credentials needed, will your org be next if you have agent read access enabled? Don't wait until it happens to you?
#GitHubSecurity #RepoSecurity #DataLeak
🔥 #スタディストブログリレー 11日目！
セキュリティ要件が頻繁に変わる今、開発環境やCI/CDをどう守る？
スタディストが進める「組織共通Renovate設定」の見直しとハマりどころを解説します！🔬
#Renovate #GitHubSecurity #SRE
https://t.co/VqLwzKhSbs
Ammar Askar warns that a one click attack via VS Code can steal your GitHub token, giving attackers read/write access to all your repos, what's your backup plan if this happens to you?
#GitHubSecurity #VSCode #Cybersecurity
@github This incident underscores supply chain risks in Cybersecurity. Securing dev environments against malicious VS Code extensions is key for DevSecOps and #GitHubSecurity.
#Cybernorse
GitHub fixed CVE-2026-3854, a critical RCE flaw in both cloud and GitHub Enterprise Server. Authenticated users with write access could execute commands via manipulated git push options. #GitHubSecurity #RCEVulnerability #EnterpriseServer
https://t.co/GY7dR34FRk
PolinRider targets 1,900+ GitHub repos using "history-falsification" to hide malware. DPRK's Lazarus Group uses fake job tests to breach developers.
#PolinRider #GitHubSecurity #DPRK #Lazarus #GitHistory #CyberSecurity #SupplyChain
https://t.co/QaXGTyUMRF
StepSecurity uncovers a supply chain attack where a verified GitHub org, dev-protocol, was hijacked to spread malicious Polymarket bots and steal crypto.
#SupplyChainAttack #GitHubSecurity #Polymarket #CryptoSecurity #CyberSecurity #InfoSec #Malware
https://t.co/xBMMoB5iC9
🔍 Cómo escanear vulnerabilidades con el framework de IA de código abierto de GitHub Security Lab
Taskflow Agent detecta bypasses de autenticación, IDORs, fugas de tokens y más.
https://t.co/jxDutP5mDn
#GitHubSecurity #VulnerabilityScanning #AppSec #RoxsRoss
eScan enterprise DLP closes critical GitHub access control gap for organizations
#eScan #EnterpriseDLP #GitHubSecurity #AccessControl #DevSecOps #CodeLeakPrevention #DLP #cybersecurityawareness
https://t.co/JYCtu6nM6F
#GitMiner is a modular tool designed for discovering sensitive information in public GitHub repositories.
https://t.co/FX7wfT9DC7
#OSINT #PenTesting #Hacking #githubsecurity #BugBounty
@c4ng4c3ir0 @_0b1d1
How we're optimizing for AI search engines!!
https://t.co/Rhi4oWVr4V
Here is how you can visibility to #AISearch and #AEO, #GEO and #LLMs queries:
Register with #llms.txt Hub using #githubsecurity and
visit: https://t.co/xLIdQ80nZ5
Steps:
- Submit your company's URL
- They verify your llms.txt file
- Gets added to public directory
- AI tools that monitor the hub discover your file faster
This can cut discovery time from 30 days → 7-14 days
Please forward to a connection that is having a hard time getting visibility to their website
#SearchTheTruth
We've open sourced ActionsGuardHub. This tool helps identify malicious GitHub Actions.(Similar to tj-actions compromise)
We'd love for you to try it out and contribute to its development. Check out the repository here: https://t.co/CAK0izcQ35
#CyberSecurityMonth #githubsecurity
🕵️♂️ Ever wonder what your GitHub Actions are really doing behind the scenes?
With recent incidents like the compromise of popular actions such as tj-actions and reviewdog, the CI/CD supply chain is proving to be a juicy target for attackers.
I never thought of that.. but it's kinda concerning 😟.
I've come across several repo with the .env file on GitHub..
Don't upload your .env file to GitHub. Always put credentials in your .env
#githubsecurity #azcodes #dotenv #SoftwareEngineer Video: @collide_ai
We’re excited to welcome Suchith Narayan & Hari Prasad @ Razorpay as they explore hidden flaws in GitHub Actions and how AI can detect and remediate exploits to protect development pipelines.
#CyberSecurity #DevSecOps #Infosec #AIsecurity #GitHubSecurity
Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets #GitHubSecurity #LeakedSecrets #OopsCommits #TruffleHog #BugBounty https://t.co/HPX8yuYpN9
Socket uncovers 11 malicious Go packages, including 8 typosquats, on GitHub. The packages deliver stealthy, in-memory payloads that compromise developer machines and CI pipelines.
#GoMalware #SupplyChainAttack #GitHubSecurity #GoLang #CybersecurityAlert
https://t.co/jLl6vQEWKW
Follow for more tips and insights on Cyber Awareness...
#BugBounty #SecurityResearch #ResponsibleDisclosure #CyberSecurity #InfoSec #CodeSecurity #VulnerabilityResearch #EthicalHacking #SecurityTesting #GitHubSecurity
Sotwe'de En Son Görülen Etiketler
sissies
Son görüldüğü yer Italy
zorrita
Son görüldüğü yer United States
brondong coli
Son görüldüğü yer France
nakedflash
Son görüldüğü yer Turkey
pasif genç
Son görüldüğü yer Turkey
Georgina_Rodriguez
Çift
Son görüldüğü yer Turkey
フリーレン
Son görüldüğü yer Japan
türbanlı
Son görüldüğü yer Turkey
92i suce
Son görüldüğü yer France
Senin İçin Trendler
En Popüler Kullanıcılar
Elon Musk 
@elonmusk
241.5M takipçi
Barack Obama
@barackobama
118.8M takipçi
Cristiano Ronaldo
@cristiano
114.5M takipçi
Donald J. Trump
@realdonaldtrump
111.9M takipçi
Narendra Modi
@narendramodi
107.1M takipçi
Rihanna
@rihanna
98.7M takipçi
NASA
@nasa
92.3M takipçi
Justin Bieber
@justinbieber
91.8M takipçi
KATY PERRY
@katyperry
90M takipçi
Taylor Swift
@taylorswift13
84M takipçi
Lady Gaga
@ladygaga
75.5M takipçi
Virat Kohli
@imvkohli
73.5M takipçi
Kim Kardashian
@kimkardashian
70.9M takipçi
YouTube
@youtube
68.8M takipçi
Neymar Jr
@neymarjr
66.5M takipçi
Bill Gates
@billgates
65.2M takipçi
Selena Gomez
@selenagomez
63.1M takipçi
The Ellen Show
@theellenshow
62.2M takipçi
CNN
@cnn
61.7M takipçi
X
@x
60.7M takipçi