Abdi jama’s Post

GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials https://lnkd.in/dmtEatqq #Infosec #Security #Cybersecurity #CeptBiro #GitHub #Vulnerability #Credentials

GitHub push protection now on by default for public repositories: GitHub push protection – a security feature aimed at preventing secrets such as API keys or tokens getting accidentally leaked online – is being switched on by default for all public repositories. “This means that when a supported secret is detected in any push to a public repository, you will have the option to remove the secret from your commits or, if you deem the secret safe, bypass the block,” the Microsoft subsidiary said. Leaked … More → The post GitHub push protection now on by default for public repositories appeared first on Help Net Security. @Poseidon-US #HelpNetSecurity #Cybersecurity

GitHub push protection now on by default for public repositories: GitHub push protection – a security feature aimed at preventing secrets such as API keys or tokens getting accidentally leaked online – is being switched on by default for all public repositories. “This means that when a supported secret is detected in any push to a public repository, you will have the option to remove the secret from your commits or, if you deem the secret safe, bypass the block,” the Microsoft subsidiary said. Leaked … More → The post GitHub push protection now on by default for public repositories appeared first on Help Net Security. #HelpNetSecurity #Cybersecurity

GitHub users accidentally exposed 12.8 million authentication and sensitive secrets in over 3 million public repositories during 2023, with the vast majority remaining valid after five days. This is according to cybersecurity experts at GitGuardian, who sent out 1.8 million complimentary email alerts to those who exposed secrets, seeing only a tiny 1.8% of those contacted taking quick action to correct the error. #github #cybersecurity #authentication #dataleak

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover | Read more hacking news on The Hacker News cybersecurity news website and learn how to protect against cyberattacks and software vulnerabilities.

GitHub Releases Results of 2FA Requirements for Code Contributors - Australia Cyber Security Magazine: GitHub Releases Results of 2FA Requirements for Code Contributors  Australia Cyber Security Magazine #CyberSecurity #InfoSec #SecurityInsights

The vulnerability detailed in the article involves a security flaw in GitHub's artifact upload feature, which attackers could exploit to inject malicious files into repositories. This vulnerability, referred to as "ArtiPacked," specifically targets artifact packages that are often used in CI/CD (Continuous Integration/Continuous Deployment) workflows. #cybersecurity #github #artifact #vulnerability

I found a great explanation of unsafe reflection at https://lnkd.in/gMxWUW7n

🔒 Introducing SSH-Snake - a cutting-edge tool for automatic network traversal using SSH private keys. 🐍 SSH-Snake, developed by MegaManSec, is a self-propagating, self-replicating script designed to automate post-exploitation tasks related to SSH private key and host discovery. This powerful tool maps out networks, identifies dependencies, and assesses the extent of network compromise potential using SSH keys. Key Features: - Automatic discovery of SSH private keys and connected hosts. - Recursive SSH traversal between systems. - Fileless traversal and propagation using only stdin and bash arguments. - Automatic elevation of privileges to root where possible. SSH-Snake is a game-changer in network security, offering unparalleled efficiency and depth in network mapping. Explore the project on GitHub: https://lnkd.in/gSeMqnkx #SSH #CyberSecurity #NetworkSecurity #Automation #GitHub #SSHSnake 🚀🔐

GitHub push protection now on by default for public repositories: GitHub push protection – a security feature aimed at preventing secrets such as API keys or tokens getting accidentally leaked online – is being switched on by default for all public repositories. “This means that when a supported secret is detected in any push to a public repository, you will have the option to remove the secret from your commits or, if you deem the secret safe, bypass the block,” the Microsoft subsidiary said. Leaked … More → The post GitHub push protection now on by default for public repositories appeared first on Help Net Security.