InfoWorld

GitHub’s public APIs are becoming an enterprise reconnaissance tool

Researchers have uncovered a sustained campaign using GitHub's public APIs and ghost accounts to profile enterprise software ...
Hosted on MSN

GitHub is finally tightening up security around npm following multiple attacks

GitHub will enforce 2FA and deprecate legacy tokens to improve package publishing security Trusted Publishing will expand, and token-based publishing will be restricted by default Shai-Hulud worm ...
InfoWorld

GitHub introduces registry for finding MCP servers

GitHub has launched the GitHub MCP Registry, a curated registry of Model Context Protocol (MCP) servers with repositories on GitHub. The GitHub MCP Registry was launched September 16 with MCP servers ...
ZDNet

GitHub partners with Stanford Law for free legal clinic to protect developers

GitHub is partnering with Stanford University on a new initiative designed to protect the legal rights of open source developers. Through its $1 million Developer Defense Fund, GitHub is creating the ...