GitHub is being weaponized as malware infrastructure, report warns Emmenhtal and Amadey are part of a coordinated, ...

2025 needs to be the year identity providers go all in on improving every aspect of software quality and security, including red teaming.

A cascading supply chain attack on GitHub that targeted Coinbase in March has now been traced back to a single token stolen from a SpotBugs workflow, which allowed a threat actor to compromise ...

Security Logging and Monitoring Failures was previously last on the list but moved up one spot and has expanded to include other types of failures.

It cites "a cascade of security failures at Microsoft" and finds that "Microsoft's security culture was inadequate" and needs to adjust to a "new normal" of cloud provider targeting.