#githubsecurity search results

Aziz

Aug 26, 2023

Automate leak detection across all GitHub repositories at once with my script. Powered by Gitleaks. 🔗 nxtexploit.com/urls/5/ #GitHubSecurity #Gitleaks #BugBounty

nXtExploit's tweet image. Automate leak detection across all GitHub repositories at once with my script. Powered by Gitleaks.

🔗 nxtexploit.com/urls/5/

#GitHubSecurity #Gitleaks #BugBounty

明明

@JohnWmm

Apr 1, 2020

刚刚 GitHub 绑定的邮箱收到了一封钓鱼邮件，估计和最近领加密货币空投有关，反手举报了一波，然后开启了账号两步验证。#GitHubSecurity

Harvey Levin

@HarveyLevin4

Aug 5, 2024

Elevate your GitHub security! Understand the critical role of signed commits in protecting your intellectual property and ensuring code integrity. #GitHubSecurity #SignedCommits bit.ly/4dvZRxg

HarveyLevin4's tweet image. Elevate your GitHub security! Understand the critical role of signed commits in protecting your intellectual property and ensuring code integrity. #GitHubSecurity #SignedCommits bit.ly/4dvZRxg

GitHub has taken a significant step in enhancing security by enabling push protection by default for all public repositories, aiming to prevent inadvertent exposure of sensitive information like access tokens and API keys during code pushes. . #avmconsulting #GitHubSecurity

AvmConsulting's tweet image. GitHub has taken a significant step in enhancing security by enabling push protection by default for all public repositories, aiming to prevent inadvertent exposure of sensitive information like access tokens and API keys during code pushes.
.
#avmconsulting #GitHubSecurity

CYSCOM VIT

@CyscomVit

Jun 27, 2023

Fortifying GitHub against Repojacking: Insights into Attacks and Effective Countermeasures! DC: Afreen S, Muskaan Siddiqui, Lynda D, Kaustubh CC: Sharmila Ramraj #github #githubsecurity #repojacking #cybersecurity #codeprotection #opensource #securedevelopment

CyscomVit's tweet image. Fortifying GitHub against Repojacking: Insights into Attacks and Effective Countermeasures!

DC: Afreen S, Muskaan Siddiqui, Lynda D, Kaustubh
CC: Sharmila Ramraj

#github #githubsecurity #repojacking #cybersecurity #codeprotection #opensource #securedevelopment

PUPUWEB Blog

@cheinyeanlim

Jan 13, 2024

Criminals exploit GitHub's infrastructure for widespread malware delivery, as revealed by security researchers at Recorded Future. Stay vigilant online! 🔐 #GitHubSecurity #MalwareThreats #CyberSafety

cheinyeanlim's tweet image. Criminals exploit GitHub's infrastructure for widespread malware delivery, as revealed by security researchers at Recorded Future. Stay vigilant online! 🔐 #GitHubSecurity #MalwareThreats #CyberSafety

Noah Franklin

@iamnoahfranklin

May 22, 2024

🚨 Alert! Critical flaw in GitHub Enterprise Server (GHES) allows unauthorized access. Patch immediately! 🔒 #GitHubSecurity #PatchNow Read more buff.ly/3KciJVv

iamnoahfranklin's tweet image. 🚨 Alert! Critical flaw in GitHub Enterprise Server (GHES) allows unauthorized access. Patch immediately! 🔒 #GitHubSecurity #PatchNow Read more buff.ly/3KciJVv

Cybersecurity News Everyday

@TweetThreatNews

Apr 4

A recent cascading supply chain attack linked to SpotBugs reveals how a stolen personal access token compromised GitHub Actions, impacting users like Coinbase and exposing major open-source vulnerabilities. 🔐⚠️ #GitHubSecurity #OpenSource link: ift.tt/G3WqvQ5

TweetThreatNews's tweet image. A recent cascading supply chain attack linked to SpotBugs reveals how a stolen personal access token compromised GitHub Actions, impacting users like Coinbase and exposing major open-source vulnerabilities. 🔐⚠️ #GitHubSecurity #OpenSource

link: ift.tt/G3WqvQ5

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Jul 26

🚨 CRITICAL: astronomer dag-factory (<0.23.0a9) lets attackers run code via GitHub Actions—repo takeover risk! Patch ASAP. radar.offseq.com/threat/cve-202… #OffSeq #InfoSec #GitHubSecurity

offseq's tweet image. 🚨 CRITICAL: astronomer dag-factory (&lt;0.23.0a9) lets attackers run code via GitHub Actions—repo takeover risk! Patch ASAP. radar.offseq.com/threat/cve-202… #OffSeq #InfoSec #GitHubSecurity

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Jul 10

🚨 CRITICAL vuln in RSSNext Folo (<585c6a5914) lets attackers steal GITHUB_TOKEN & hijack repos! Update now to stay safe. 🔒 radar.offseq.com/threat/cve-202… #OffSeq #Vulnerability #GitHubSecurity

offseq's tweet image. 🚨 CRITICAL vuln in RSSNext Folo (&lt;585c6a5914) lets attackers steal GITHUB_TOKEN &amp; hijack repos! Update now to stay safe. 🔒 radar.offseq.com/threat/cve-202… #OffSeq #Vulnerability #GitHubSecurity

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Jul 26

🚨 CRITICAL: Command injection flaw in tj-actions/branch-names <9.0.0! Upgrade now to protect your CI/CD pipelines. Affects GitHub Actions. Details: radar.offseq.com/threat/cve-202… #OffSeq #GitHubSecurity #CICD

offseq's tweet image. 🚨 CRITICAL: Command injection flaw in tj-actions/branch-names &lt;9.0.0! Upgrade now to protect your CI/CD pipelines. Affects GitHub Actions. Details: radar.offseq.com/threat/cve-202… #OffSeq #GitHubSecurity #CICD

Joe Brian

@JoeBri6

Aug 6, 2024

Protect your code and intellectual property by implementing signed commits. Discover essential best practices for a secure software development environment on GitHub. #GitHubSecurity #SignedCommits bit.ly/3WAbZGP

JoeBri6's tweet image. Protect your code and intellectual property by implementing signed commits. Discover essential best practices for a secure software development environment on GitHub. #GitHubSecurity #SignedCommits bit.ly/3WAbZGP

Suchith Narayan

@narayansuchith

Oct 13

We've open sourced ActionsGuardHub. This tool helps identify malicious GitHub Actions.(Similar to tj-actions compromise) We'd love for you to try it out and contribute to its development. Check out the repository here: github.com/suchithnarayan… #CyberSecurityMonth #githubsecurity

Suchith Narayan

@narayansuchith

Mar 26

🕵️‍♂️ Ever wonder what your GitHub Actions are really doing behind the scenes? With recent incidents like the compromise of popular actions such as tj-actions and reviewdog, the CI/CD supply chain is proving to be a juicy target for attackers.

Briskinfosec Technology and Consulting Pvt Ltd

@briskinfosec

Sep 23, 2020

How to secure your #Githubrepository? #Githubsecurity #secureyour Github_project #GitHubEnterprise # Git-secret #Implementing_securitypractices #Make_your_repositorytoPrivate #VAPT #Penetration_Testing | @briskinfosec bit.ly/2VrRtqg

briskinfosec's tweet image. How to secure your #Githubrepository? #Githubsecurity #secureyour Github_project #GitHubEnterprise # Git-secret #Implementing_securitypractices #Make_your_repositorytoPrivate #VAPT #Penetration_Testing
| @briskinfosec bit.ly/2VrRtqg

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Sep 8

🚨HIGH severity breach: Salesloft & Drift hit by GitHub compromise, stolen OAuth tokens at risk! Audit tokens & enable MFA now. Details: radar.offseq.com/threat/saleslo… #OffSeq #OAuth #GitHubSecurity

offseq's tweet image. 🚨HIGH severity breach: Salesloft &amp; Drift hit by GitHub compromise, stolen OAuth tokens at risk! Audit tokens &amp; enable MFA now. Details: radar.offseq.com/threat/saleslo… #OffSeq #OAuth #GitHubSecurity

Lisa

@RawlsLisa

Aug 5, 2024

Strengthen your organization's software development environment and protect your intellectual property. Discover the importance of signed commits for code integrity and implement best practices for robust GitHub security. #GitHubSecurity #SignedCommits bit.ly/3WS1wbi

RawlsLisa's tweet image. Strengthen your organization's software development environment and protect your intellectual property. Discover the importance of signed commits for code integrity and implement best practices for robust GitHub security. #GitHubSecurity #SignedCommits bit.ly/3WS1wbi

❀.(´▽`)❀.yurié

@1115_lilium

3 h

本日はご参加いただきありがとうございました😊 資料を公開しました speakerdeck.com/yuriemori/shen… #DevSecOps #githubsecurity #wakecareer_勉強会

1115_lilium's tweet card. WAKECareer様の勉強で登壇させていただきました。 https://wake-career.connpass.com/event/369552/ DevSecOpsのセキュリティ戦略の設計や脅威の識別、GitHub Advanced Securityを活用したセキュリティの開発プロセスへの…

生成AI時代のセキュアコーディングとDevSecOps

Source: speakerdeck.com

reverseame

@reverseame

Sep 12

Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets #GitHubSecurity #LeakedSecrets #OopsCommits #TruffleHog #BugBounty trufflesecurity.com/blog/guest-pos…

reverseame's tweet card. GitHub Archive logs every public commit, even the ones developers try to delete. Force pushes often cover up mistakes like leaked credentials by rewriting Git history. GitHub keeps these dangling...

Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets ◆ Truffle Security Co.

Source: trufflesecurity.com

Cybersecurity News Everyday

@TweetThreatNews

Sep 23

GitHub enforces mandatory 2FA and trusted publishing to secure NPM and RubyGems ecosystems against supply-chain attacks like s1ngularity, GhostAction, and Shai-Hulud. Enhanced security with short-lived tokens. #GitHubSecurity #SupplyChain #npm ift.tt/rBls0Ow

TweetThreatNews's tweet card. GitHub is implementing new security measures to counter supply-chain attacks that have compromised thousands of accounts and caused significant data theft. These proactive defenses include mandatory...

GitHub tightens npm security with mandatory 2FA, access tokens

Source: hendryadrian.com

❀.(´▽`)❀.yurié

@1115_lilium

3 h

本日はご参加いただきありがとうございました😊 資料を公開しました speakerdeck.com/yuriemori/shen… #DevSecOps #githubsecurity #wakecareer_勉強会

生成AI時代のセキュアコーディングとDevSecOps

Source: speakerdeck.com

Suchith Narayan

@narayansuchith

Oct 13

Suchith Narayan

@narayansuchith

Mar 26

Baseline

@BaselineITC

Oct 8

GitHub compromise led to Drift data breach, impacting 22 companies. Your cloud isn't automatically secure—it's as strong as your weakest configuration. Multi-cloud? Multi-risk without proper governance. #CloudSecurity #DevSecOps #GitHubSecurity #MultiCloud #TechNews

Agente Geek

@agentegeek_io

Oct 8

De CTF a Bug Hunter VIP en GitHub! 🤯 Descubre la asombrosa historia de @xiridium, gurú de la seguridad y cazador de vulnerabilidades. Secretos, técnicas y más! 👉 Lee la nota completa: agentegeek.io/ctf-cazador-bu… #BugBounty #GitHubSecurity #CTF

agentegeek_io's tweet image. De CTF a Bug Hunter VIP en GitHub! 🤯 Descubre la asombrosa historia de @xiridium, gurú de la seguridad y cazador de vulnerabilidades. Secretos, técnicas y más! 👉 Lee la nota completa: agentegeek.io/ctf-cazador-bu… #BugBounty #GitHubSecurity #CTF

ReconBee

@ReconBee

Sep 24

GitHub notifications abused to impersonate Y Combinator for crypto theft reconbee.com/github-notific… #githubsecurity #GitHub #cryptotheft #cyberattack

ReconBee's tweet card. Batch (W2026) served as the campaign's bait read more about GitHub notifications abused to impersonate Y Combinator for crypto theft

GitHub notifications abused to impersonate Y Combinator for crypto theft

Source: reconbee.com

Cybersecurity News Everyday

@TweetThreatNews

Sep 23

GitHub tightens npm security with mandatory 2FA, access tokens

Source: hendryadrian.com

X CyberSec

@xcybersecnews

Sep 23

🔒 Big news for developers! GitHub is mandating 2FA and short-lived tokens by September 2025 to fortify npm supply chain security. Time to secure your accounts! #GitHubSecurity #SupplyChain thehackernews.com/2025/09/github…

xcybersecnews's tweet card. GitHub enforces FIDO 2FA and seven-day token limits after Shai-Hulud npm attack to boost supply chain security.

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

Source: thehackernews.com

X CyberSec

@xcybersecnews

Sep 17

🚨 Salesloft confirms a data breach after their GitHub account was compromised! This highlights a critical supply chain vulnerability. A stark reminder to secure all development tools and platforms. #Cybersecurity #GitHubSecurity darkreading.com/cyberattacks-d…

reverseame

@reverseame

Sep 12

Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets #GitHubSecurity #LeakedSecrets #OopsCommits #TruffleHog #BugBounty trufflesecurity.com/blog/guest-pos…

Guest Post: How I Scanned all of GitHub’s “Oops Commits” for Leaked Secrets ◆ Truffle Security Co.

Source: trufflesecurity.com

reverseame

@reverseame

Sep 11

GitHub Malware Protection Uncovering the Supply Chain Crisis and Amadey Threat #GitHubSecurity #SupplyChainCrisis #AmadeyMalware #SecretLeaks #DevSecOps ncse.info/github-malware…

reverseame's tweet card. GitHub malware protection tips and insights from 2025's biggest threats, including Amadey, RepoJacking, and CI/CD supply chain attacks.

GitHub Malware Protection Uncovering the Supply Chain Crisis and Amadey Threat

Source: ncse.info

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Sep 8

J2R Solutions

@J2rSolutions

Aug 15

Dynatrace + GitHub: Automate vulnerability enrichment and tighten security operations. #j2rsolves #appsec #githubsecurity dynatrace.com/news/blog/inge…

CyberDevHq

@thecyberdevhq

Aug 14

Golden rule: 📌 Recon first, clone later. Don’t let a “cool” repo become a backdoor into your machine. Make it a habit starting today—invest the time rather than take the risk without any assurance. 🔁Share/Repost so others can stay safe too. #GitHubSecurity #CodeSafety

Gray Hats

@the_yellow_fall

Aug 8

Socket uncovers 11 malicious Go packages, including 8 typosquats, on GitHub. The packages deliver stealthy, in-memory payloads that compromise developer machines and CI pipelines. #GoMalware #SupplyChainAttack #GitHubSecurity #GoLang #CybersecurityAlert securityonline.info/the-malicious-…

the_yellow_fall's tweet card. Socket uncovers 11 malicious Go packages, including 8 typosquats, on GitHub. The packages deliver stealthy, in-memory payloads that compromise developer machines and CI pipelines.

The Malicious Go Modules: 11 Malicious Go Packages Found on GitHub Deploying Stealthy Malware

Source: securityonline.info

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Jul 26

🚨 CRITICAL: astronomer dag-factory (<0.23.0a9) lets attackers run code via GitHub Actions—repo takeover risk! Patch ASAP. radar.offseq.com/threat/cve-202… #OffSeq #InfoSec #GitHubSecurity

OffSeq | Adversary Tactics for Cyber Resilience

@offseq

Jul 26

Cybersecurity News Everyday

@TweetThreatNews

Jul 25

Amazon’s Visual Studio Code extension was compromised by a hacker who injected malicious code capable of executing data wipe commands. Amazon quickly removed the threat and issued a safe update. #GitHubSecurity #DataRisk #UK ift.tt/O8RZ73E

TweetThreatNews's tweet card. A hacker compromised Amazon’s Visual Studio Code extension by injecting malicious code that initially appeared to be a harmless message but could execute destructive commands. Amazon swiftly removed...

Amazon AI coding agent hacked to inject data wiping commands

Source: hendryadrian.com

GitHub Security

@GitHubSecurity

Matt Langlois

@fletchto99

YusufRehman🦇

@YusufRehmaan

19 h

Hi team, I need help. My whitelist wallet got hacked, ETH for mint drained. Really excited to mint. Please allow changing wallet or mint from new one. old hack 0x5c4DEfC78B2A181b2F781199eEf3A50B4F25bA9a new 0x21abE949fA00bD2e3a7e1563f978Af9948e0759D @antongotchi @sleepagotchi

YusufRehmaan's tweet image. Hi team, I need help. My whitelist wallet got hacked, ETH for mint drained. Really excited to mint. Please allow changing wallet or mint from new one.
old hack 0x5c4DEfC78B2A181b2F781199eEf3A50B4F25bA9a
new 0x21abE949fA00bD2e3a7e1563f978Af9948e0759D
@antongotchi
@sleepagotchi

Hacking Articles

@hackinarticles

Oct 13

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

hackinarticles's tweet image. Pic of the Day

#infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

VIEH Group

@viehgroup

Oct 13

The new cs.github.com search allows for regex, which means brand *new* regex GitHub Dorks are possible! Eg, find SSH and FTP passwords via connection strings with: /ssh:\/\/.*:.*@.*target\.com/ /ftp:\/\/.*:.*@.*target\.com/ #infosec #bugbountytips #bugbounty

$viehgroup's tweet image. The new cs.github.com search allows for regex, which means brand *new* regex GitHub Dorks are possible! Eg, find SSH and FTP passwords via connection strings with: /ssh:\/\/.*:.*@.*target\.com/ /ftp:\/\/.*:.*@.*target\.com/ #infosec #bugbountytips #bugbounty$

Hacking Articles

@hackinarticles

9 h

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

kanav

@kanavtwt

2 m

this is what an employed developer's github looks like

NullSecX

@NullSecurityX

21 m

I’m really happy to see that my content has been used as a reference. Thank you! 🙏 #BugBounty #CyberSecurity

Hacking Articles

@hackinarticles

Oct 12

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

{QuillAI Network}

@QuillAI_Network

13 m

In June 2025, Someone found a critical vulnerability (CVSS 9.6) in @github Copilot Chat letting attackers silently exfiltrate secrets & source code from private repos and even hijack Copilot’s suggestions to deliver malicious code. Here’s how it worked 👇

QuillAI_Network's tweet image. In June 2025, Someone found a critical vulnerability (CVSS 9.6) in @github Copilot Chat letting attackers silently exfiltrate secrets &amp; source code from private repos and even hijack Copilot’s suggestions to deliver malicious code.

Here’s how it worked 👇

Md Ismail Šojal 🕷️

@0x0SojalSec

Sep 29, 2023

The new cs.github.com search allows for regex, which means brand **new** regex GitHub Dorks are possible! Eg, find SSH and FTP passwords via connection strings with: /ssh:\/\/.*:.*@.*target\.com/ /ftp:\/\/.*:.*@.*target\.com/ #infosec #cybersecurite #bugbountytip

$0x0SojalSec's tweet image. The new cs.github.com search allows for regex, which means brand **new** regex GitHub Dorks are possible! Eg, find SSH and FTP passwords via connection strings with: /ssh:\/\/.*:.*@.*target\.com/ /ftp:\/\/.*:.*@.*target\.com/ #infosec #cybersecurite #bugbountytip$

Hacking Articles

@hackinarticles

Dec 8

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

Hacking Articles

@hackinarticles

9 h

Pic of the Day #infosec #cybersecurity #cybersecuritytips #pentesting #cybersecurityawareness #informationsecurity

Deedy

@deedydas

20 h

This software engineer was nearly hacked by a coding interview. I've never seen this attack channel before. Be careful out there, especially vibe coders.