Baitaphish
Security intelligence
SearchLatest briefing
Source

github_security_blog

Published records for this source ID. Several records can describe the same underlying event.

37 item(s)
← Back to all sources
2026-08-07T07:23:21Z
How we took malware advisories beyond npm
a415f9fe7baf…
Advisory DatabaseDependabotGitHub
Source →Open →
2026-08-06T19:23:21Z
How we took malware advisories beyond npm
ab880551bf04…
bug-bountycredential-exposuredependabot
Source →Open →
2026-07-29T19:23:21Z
Tame Dependabot: Group your updates, slow the cadence, keep security fast
25a25b139d64…
bug-bountycredential-exposuredependabot
Source →Open →
2026-07-28T19:23:27Z
Disrupting supply chain attacks on npm and GitHub Actions
d39a627f47ea…
DependabotGitHubGitHub-Actions
Source →Open →
2026-07-23T19:23:26Z
The case for a cooldown: Why Dependabot now waits before issuing version updates
6952e2888568…
Advisory DatabaseDependabotGitHub Enterprise Server
Source →Open →
2026-07-22T19:23:28Z
Next chapter: Restructuring GitHub’s bug bounty program
3f31e00e0aaa…
Advisory DatabaseGitHub Enterprise ServerLLM
Source →Open →
2026-07-17T19:23:26Z
How GitHub gave every repository a durable owner
9dd7652e0c37…
LLMadvisory-databaseautomation
Source →Open →
2026-07-15T07:23:26Z
How GitHub gave every repository a durable owner
3255ba104feb…
advisory-databasebug-bountycode-security-risk-assessment
Source →Open →
2026-07-10T07:23:29Z
How GitHub gave every repository a durable owner
bec0b36db1e7…
advisory-databaseagentic-aibug-bounty
Source →Open →
2026-07-09T19:23:26Z
How GitHub gave every repository a durable owner
c14990a0e844…
advisory-databaseai-securitybug-bounty
Source →Open →
2026-07-02T19:23:27Z
How GitHub used secret scanning to reach inbox zero
dc4d42f95d85…
LLMRCEadvisory-database
Source →Open →
2026-07-02T07:23:28Z
6 security settings every GitHub maintainer should enable this week
02c4c8824fb2…
RCEadvisory-databasebug-bounty
Source →Open →
2026-07-01T19:23:27Z
6 security settings every GitHub maintainer should enable this week
ddd04e8a595b…
LLMadvisory-databaseai-security
Source →Open →
2026-06-29T19:23:29Z
Inside the Advisory Database and what happens when vulnerability volume breaks records
6adcd730b5b8…
LLMadvisory databaseadvisory trends
Source →Open →
2026-06-18T19:23:28Z
Making secret scanning more trustworthy: Reducing false positives at scale
8d433ba6b6cc…
LLMai-detectionsbug-bounty
Source →Open →
2026-06-11T19:23:26Z
Making secret scanning more trustworthy: Reducing false positives at scale
cb2a170ebe36…
AI-detectionsCodeQLLLM
Source →Open →
2026-05-27T07:23:30Z
Investigation update: GitHub Enterprise Server signing key rotation
d00a0bfcaace…
ai-securitybug-bountycode-security
Source →Open →
2026-05-26T19:23:25Z
Investigation update: GitHub Enterprise Server signing key rotation
c762be59e54e…
bug-bountycode-securityenterprise
Source →Open →
2026-05-21T07:23:27Z
Investigating unauthorized access to GitHub-owned repositories
2d757b6c3bff…
ai-powered-detectionsbug-bountycode-scanning
Source →Open →
2026-05-15T19:23:30Z
Raising the bar: Quality, shared responsibility, and the future of GitHub’s bug bounty program
d11649a44550…
ai-powered-detectionsapplication-securitybug-bounty
Source →Open →
2026-04-29T19:23:29Z
Securing the git push pipeline: Responding to a critical remote code execution vulnerability
1212a13638b2…
RCEgitgit push
Source →Open →
2026-04-28T19:23:31Z
Securing the git push pipeline: Responding to a critical remote code execution vulnerability
296ba93a1cbe…
ai-securityapplication-securitycode-security-risk-assessment
Source →Open →
2026-04-15T19:23:34Z
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
5aa60f395f2e…
AI securityAI-powered detectionsCodeQL
Source →Open →
2026-04-15T07:23:26Z
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
408eae98723c…
AI-powered detectionsCNA publishingCodeQL
Source →Open →
2026-04-14T19:23:25Z
Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
b7fb4025fda7…
AI‑powered detectionsCode Security Risk AssessmentCodeQL
Source →Open →
2026-04-08T07:23:25Z
Securing the open source supply chain across GitHub
afde506a271a…
AI-detectionsCodeQLGitHub Security Lab
Source →Open →
2026-04-01T19:23:27Z
Securing the open source supply chain across GitHub
8fac173ffe9d…
AI-detectionsCNACodeQL
Source →Open →
2026-03-26T19:23:29Z
A year of open source vulnerability trends: CVEs, advisories, and malware
a4d447331ec7…
AI-detectionsCNAsCodeQL
Source →Open →
2026-03-25T19:23:30Z
GitHub expands application security coverage with AI‑powered detections
66e2a8e677a2…
ai-powered-detectionsapplication-securityauth-bypass
Source →Open →
2026-03-23T19:23:28Z
GitHub expands application security coverage with AI‑powered detections
09d183dec507…
ai-detectionapplication-securityauth-bypass
Source →Open →
2026-03-17T19:23:28Z
Investing in the people shaping open source and securing the future together
26143c1555c5…
aibug-bountycodeql
Source →Open →
2026-03-12T07:23:27Z
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
ed8ccde51ad4…
AI-powered scanningAuth bypassCodeQL
Source →Open →
2026-03-11T19:23:26Z
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
57f289675bf0…
aiauth-bypassbug-bounty
Source →Open →
2026-03-11T07:23:28Z
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
50cf679452cd…
aiauth-bypassbug-bounty
Source →Open →
2026-03-09T19:23:32Z
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
d399f2f51d63…
aiauth-bypassbug-bounty
Source →Open →
2026-03-07T07:23:26Z
How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
267f487f00db…
AI-poweredAuth BypassCodeQL
Source →Open →
2026-02-28T18:04:17Z
AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent
9f8fab3cc83a…
AICodeQLGitHub Security Lab
Source →Open →