Salesforce-owned #Heroku begins resetting users' passwords following the theft of #GitHub OAuth tokens, which involved unauthorized access to an internal customer database.

Read: https://thehackernews.com/2022/05/heroku-forces-user-password-resets.html

🔥 Data Leak Alert!

Microsoft accidentally exposed 38TB of private data, including secrets, keys, passwords, and 30K+ internal Teams messages, on AI #GitHub repository due to a security glitch.

Read more in this article: https://thehackernews.com/2023/09/microsoft-ai-researchers-accidentally.html

#GitHub has released critical fixes for 3 flaws in Enterprise Server, including CVE-2024-6800 (CVSS 9.5).

This flaw could allow attackers to gain admin privileges, posing serious risks to organizations using SAML SSO.

Details: https://thehackernews.com/2024/08/github-patches-critical-security-flaw.html

🚨 Cybercriminals have a new weapon: GoIssue, a tool that targets #GitHub developers with bulk phishing emails.

This method can steal credentials and compromise repositories. With prices slashed, attacks are now more scalable.

Read: https://thehackernews.com/2024/11/new-phishing-tool-goissue-targets.html