External link for GitHub Security Lab
🛠️ Great projects deserve great defenses. Spend 15 minutes today to make sure yours doesn’t make headlines for the wrong reasons. Protect it now 🔒 gh.io/protect-your-project
The internet was on fire. 🔥 One small library affecting billions of systems. Log4Shell was the biggest security vulnerability of all time. Now, Log4J maintainer, Christian Grobmeier tells us what it felt like inside the flames 👉 https://lnkd.in/gwNRE9_5
No te pierdas la charla de Antonio Morales en Ekoparty donde presentara su nueva herramienta FRFuzz! 📅 Jueves, 23 Oct, 15:30 AST ℹ️ gh.io/eko
GitHub Security Lab reposted this
The internet was on fire. 🔥 One small library affecting billions of systems. Log4Shell was the biggest security vulnerability of all time. Now, Log4J maintainer, Christian Grobmeier tells us what it felt like inside the flames 👉 https://lnkd.in/gwNRE9_5
👋 Hey maintainers You build the software the world relies on — we’ll help you keep it secure. Protect your project for free in 15 minutes ➡️ gh.io/protect-your-project
Are you in Warsaw for The Hack Summit? Join Sylwia Budzynska for an introductory talk about security research, static analysis, and CodeQL: "From One Bug to Hundreds: Scaling Vulnerability Research with CodeQL" Learn how to scale your security research by codifying your vulnerabilities into CodeQL queries. 📆 October 14, 11:20 CEST Track: Security in Software Development & DevSecOps
Here are our September bug bounty stats! ✅ 166 bounty reports submitted 👥 120 hackers participated in our program 💰 Awarded $113,008 in bounties Found a vulnerability? Submit it here: https://t.co/HG2AqybW0p.
⏱️ Maintainers, we know you don’t have time to research every security best practice. That’s why we’ve made it simple: in just 15 minutes, you can protect your project from vulnerabilities, secrets leaks, and exploits. ✅ No security expertise required ✅ Free for open source ✅ Quick wins with long-term impact Protect your project now at gh.io/protect-your-project
Recent account takeovers and attacks on package registries are a wake-up call: it's time to raise the bar on authentication and secure publishing practices. Find out what npm is doing—and what steps you can take—to help secure the open source supply chain: https://lnkd.in/gE9fWg6U Together, we can build a safer, more trustworthy open source ecosystem. #SupplyChainSecurity #OpenSourceSecurity