Bleeping Computer

GitHub now supports security keys when using Git over SSH

GitHub has added support for securing SSH Git operations using FIDO2 security keys for added protection from account takeover attempts. Researchers at North Carolina State University (NCSU) found [PDF ...
Tech Times on MSN

NPM closes skeleton-key attack surface: Bypass tokens lose account control

npm granular access tokens configured to bypass 2FA can no longer create tokens, change maintainers, or manage org membership ...
Bleeping Computer

GitHub now can auto-block token and API key leaks for all repos

GitHub is now automatically blocking the leak of sensitive information like API keys and access tokens for all public code repositories. Today's announcement comes after the company introduced push ...
Tech Times on MSN

Docker Hub OIDC closes last long-lived credential gap in GitHub Actions

Docker Hub OIDC connections for GitHub Actions replace stored personal access tokens with per-run credentials that expire ...
The Hacker News

Leaked n8n API Tokens Exposed Live Instances to Credential Theft

GitGuardian found 321 n8n instances accepting leaked GitHub tokens that could expose workflows, data, and downstream ...