Critical AWS supply chain vulnerability could have let hackers take over key GitHub repositories

A critical misconfiguration in Amazon Web Services (AWS) CodeBuild service exposed several AWS-managed GitHub repositories to ...
The Hacker News

AWS CodeBuild Misconfiguration Exposed GitHub Repos to Potential Supply Chain Attacks

A misconfigured AWS CodeBuild webhook allowed bypass of actor ID checks, risking takeover of four AWS GitHub repositories ...
Infosecurity Magazine

CodeBuild Flaw Put AWS Console Supply Chain At Risk

A critical misconfiguration in AWS CodeBuild has allowed attackers to seize control of core AWS GitHub repositories, ...
InfoWorld

Possible software supply chain attack through AWS CodeBuild service blunted

Wiz researchers investigated and found the core of the flaw, a threat actor ID bypass due to unanchored regexes, and notified ...
How-To Geek on MSN

This tool turns any Git repo into a private, offline 'GitHub' website

Build pgit once, then generate a browsable, syntax-highlighted “Code” view for any repo you can host locally or anywhere, ...
How-To Geek on MSN

I ditched GitHub and self-hosted my own private alternative

I love GitHub, and have used it for many, many years. GitHub isn’t always the best choice for code revisioning though. When I started building some private apps, I decided to look into alternatives ...
TechRepublic

How to take your GitHub repositories on the go with GitHub for iOS

How to take your GitHub repositories on the go with GitHub for iOS Your email has been sent GitHub is the place where open source and commercial coding projects live, communicate and grow through pull ...
Geeky Gadgets

Why your private GitHub repos may not be as secure as you think

Private and deleted GitHub repositories are not as secure as users might assume. Data from deleted forks, deleted repositories, and private repositories can still be accessed, often indefinitely. This ...
Ars Technica

GitHub besieged by millions of malicious repositories in ongoing attack

GitHub is struggling to contain an ongoing attack that’s flooding the site with millions of code repositories. These repositories contain obfuscated malware that steals passwords and cryptocurrency ...