GitHub Security Lab’s mission is to inspire and enable the community to secure the open source software we all depend on.
Joined October 2019
- Tweets1.4K
- Following15
- Followers26.5K
- Likes189
GitHub Security Lab retweeted
Last year, I committed to uncovering critical vulnerabilities in Maven repositories. Now it’s time to share the findings: RCE in Sonatype Nexus, Cache Poisoning in JFrog Artifactory, and more! Read it all below 🧵
GitHub Security Lab retweeted
Ever wanted to learn fuzzing?!?! 🐛 Me and some other folks at @pbrucla recently ran a project where we taught folks about the basics of fuzzing with Honggfuzz. 👀 Some fun activities inspired by the Fuzzing101 repo from the folks at @GHSecurityLab! 🤗
github.com/pbrucla/fuzzing-l…
GitHub Security Lab retweeted
A new free tier of GitHub Copilot in @code.
✅ 2,000 code completions per month
💬 50 chat messages per month
💫 Models like Claude 3.5 Sonnet or GPT-4o
♥️ More fun for you
Check it out today!
Oh yeah, and we passed 150M developers on GitHub 💅 github.blog/news-insights/pr…
GitHub Security Lab retweeted
We're at @BlackHatEvents in Vegas this week! Come chat with us at our booth and find out how "found means fixed". Learn more 👉 #BHUSA resources.github.com/github-… – at Las Vegas, NV
GitHub Security Lab retweeted
Kafka UI can be a juicy target for bug hunters, here is why: github.blog/2024-07-22-3-way…
GitHub Security Lab retweeted
Our bug bounty program celebrates 10 years 🥳 Check out key moments from each year on the blog: github.blog/2024-06-11-10-ye….
GitHub Security Lab retweeted
🤖🔐 Can We Trust AI-Generated Code? 🔐🤖
We're diving into AI's role in development with @jkcso from @github Security Lab! 🚀
🤖 Is AI-generated code safe for production?
🔍 Importance of thorough code reviews.
✅ Best security practices.
#AISecurity #GitHubCopilot
GitHub Security Lab retweeted
🎉 OpenSSF is thrilled to support the upcoming CVE and FIRST VulnCon 2024 and Annual CNA Summit next week! Join us as we work towards making open source software safer across industries. Learn more about agenda highlights and our engagement at VulnCon: openssf.org/blog/2024/03/20/…
GitHub Security Lab retweeted
From Code Suggestions to Security xitter.cf/i/broadcasts/1mrxmyNVE…
GitHub Security Lab retweeted
This is the second part of 'CodeQL Zero to Merge’, a step-by-step guide on writing Ruby Server-Side Template Injection and Ruby JWT Security Queries, both submitted to @GHSecurityLab bounty program.
maikypedia.gitlab.io/posts/c…
GitHub Security Lab retweeted
Joseph Katsioloudes is a cyber security specialist and works at the GitHub Security Lab.
He joins the show today to talk about Copilot, the future of software development in an AI world, using AI to improve security, and more.
softwareengineeringdaily.com…
@jkcso @GHSecurityLab
GitHub Security Lab retweeted
Learn how I used #CodeQL to find insecure TrustManagers and disabled hostname verification in #java and getting 5 CVEs.
The most serious CVE is in platform/ballerina-lang which could have be used for RCE or supply-chain attacks by a MiTM attacker 🤯
intrigus.org/research/2023/1…
GitHub Security Lab retweeted
Discover the latest insights from our @GHSecurityLab team’s audit on @home_assistant security! 🛡️
github.blog/2023-11-30-secur… #CodeReview
GitHub Security Lab retweeted
Hey folks!
The #GreHack23 sponsors week continues.
Today we would like to thank our 32 bits sponsors: @quarkslab, @RandoriSec, @secnumcloud, @GHSecurityLab, @LexfoSecurite and @0xLupin.
Thanks for supporting #GreHack23!
GitHub Security Lab retweeted
Sponsors Track #EKO2023 🔥
📌 @XCorail, Senior Director, Security Research, @github
💡 Human vs AI: Ship Secure Code with GitHub Copilot
📅 Miércoles 1 | 15:30HS
🎟️ ¿Todavía no tenés tu entrada? ¡Reservá GRATIS tu lugar! >> eventbrite.com.ar/e/registro…
Para poder asistir a la conferencia, debés registrarte online por Eventbrite. ✅
GitHub Security Lab retweeted
You know GitHub Actions, these small building blocks that make your dev life easier… But they can also get you pwned in no time, if you are not careful. @intrigus_ who is a prolific GitHub Actions/Workflows bug hunter will tell us why on Thursday, 7pm, CS building room -120.
GitHub Security Lab retweeted
Looking to level up your security skills? 👀
Join us for Open Source Friday as @jkcso shows us how this game can sharpen security skills and protect applications.
Live today at 1pm ET on twitch.tv/github!
RSVP: gh.io/osf-secure
ALT Gamifying security on August 18, 2023 at 1pm ET
GitHub Security Lab retweeted
We would also like to thank our prize sponsor: @ghsecuritylab
- their mission is to inspire and enable the community to secure the open source software we all depend on. securitylab.github.com