Do Son Mozilla rotated the Linux GPG signing key for Firefox and Thunderbird after a subkey copy was inadvertently pushed to a private GitHub repository.
GitHub Security
Critical Alert: CVE-2026-25244 (CVSS 9.8) in WebdriverIO allows RCE via unsanitized git branch names. Secure your CI/CD pipeline and update to 9.24.0 now.
Checkmarx discloses a major GitHub breach via a Trivy supply chain flaw. Attackers injected malicious code and exfiltrated data for a month. Get the facts.
Void Dokkaebi turns developers into vectors. With 750+ infected repos and malicious VS Code tasks, this supply chain worm is hunting your CI/CD and crypto.
With the rise of cyberattacks, understanding GitHub security is more important than ever. Learn how to protect your repositories from vulnerabilities. Stay informed to safeguard your projects and data.