#github-security

[ follow ]
#oauth-abuse #third-party-app-governance #secrets-exposure #malware-as-a-service #malware-distribution
Information security
fromInfoWorld
3 weeks ago

A wake-up call for identity security in devops

OAuth app permissions often lack centralized visibility and governance, enabling attackers to abuse authorized tokens to access code, secrets, and pivot across infrastructure.
Privacy technologies
fromArs Technica
2 months ago

GitHub abused to distribute payloads on behalf of malware-as-a-service

Malware-as-a-service operators have exploited GitHub to distribute malicious software, posing challenges for organizations relying on the platform.
[ Load more ]