Category: GitHub - Page 5

Sep 15 2024

PyPI loophole puts thousands of packages at risk of compromise

6 minutes of reading / API, Computer, Git, GitHub, open source, Tech / By Comkex

Thousands of applications that have taken advantage of open source Python Package Index (PyPI) software packages may be at risk of hijacking and subversion by malicious actors, opening up the possibility of major supply chain attacks affecting even greater numbers of downstream organisations and users. That is according to threat researchers at jFrog, who identified…

PyPI loophole puts thousands of packages at risk of compromise Read More »

Sep 11 2024

NCSC and allies call out Russia’s Unit 29155 over cyber warfare

5 minutes of reading / Atlassian, DNS, Git, GitHub, Microsoft, open source, Tech, VPN / By Comkex

The UK’s National Cyber Security Centre (NCSC) and its counterpart bodies in the Five Eyes intelligence alliance have joined partners from Czechia, Estonia, Germany, Latvia and Ukraine to identify a Russian military cyber unit that has been conducting a sustained campaign of malicious activity over the past four years. Part of the Main Directorate of…

NCSC and allies call out Russia’s Unit 29155 over cyber warfare Read More »

Sep 1 2024

Women in data: Claire Thompson, chief data officer, L&G

8 minutes of reading / AI, chatbot, cloud computing, data analytics, data science, DevOps, Git, GitHub, Microsoft, Tech, Technology / By Comkex

It’s almost become a cliché to say that data is the lifeblood of the modern enterprise. However, Claire Thompson, group chief data and analytics officer (CDAO) at financial services firm L&G, says data has always been crucial to big firms. What’s changed during the past few years, particularly in her sector, is a recognition of…

Women in data: Claire Thompson, chief data officer, L&G Read More »

Jul 24 2024

Innovations to power secure-by-design development

3 minutes of reading / agile, Atlassian, Bitbucket, Git, GitHub, open source, social media, Tech / By Comkex

Security leaders and software developers will benefit from deeper visibility into their organisations’ software development security posture as they work, bolstering moves towards the nirvana of so-called secure-by-design code, with the introduction of an industry-first solution from sector specialist Secure Code Warrior (SCW). SCW Trust Agent comes hot on the heels of the introduction of…

Innovations to power secure-by-design development Read More »

Jul 14 2024

Data is the key to unlocking the UK’s AI potential

6 minutes of reading / AI, ChatGPT, Git, GitHub, Tech / By Comkex

While data has the potential to boost the UK economy significantly, the links between data and AI are not sufficiently understood. If we are to seize this potential and position the UK as a global AI superpower, as the National AI Strategy aims to do, we must get a grip on data infrastructure in order…

Data is the key to unlocking the UK’s AI potential Read More »

Mar 10 2024

OSS leaders detail commitments to bolster software security

4 minutes of reading / API, Cloud, Git, GitHub, Google, Google Cloud, open source, Synopsys, Tech / By Comkex

The operators of leading open source software (OSS) package repositories, including the Python Software Foundation and the Rust Foundation, have set out the actions they are taking to help better secure and protect the open source software (OSS) ecosystem, underscored by a series of high-profile OSS flaws in the past few years, most notably Log4Shell.…

OSS leaders detail commitments to bolster software security Read More »

Feb 28 2024

I hope iOS 18 will bring generative AI like ChatGPT to the iPhone search

3 minutes of reading / AI, Apple, ChatGPT, Git, GitHub, Google, iPad, iPhone, Microsoft, Tech / By Comkex

iOS 18 will deliver Apple’s first generative AI features for iPhone. That’s the expectation, at least, considering what’s available out there. ChatGPT, Microsoft Copilot, and Google Gemini are only getting better, with updates dropping frequently. Apple isn’t ready to announce anything. But Tim Cook did tease recently big AI announcements for later this year. That…

I hope iOS 18 will bring generative AI like ChatGPT to the iPhone search Read More »

Sep 20 2023

38TB Microsoft data leak highlights risks of oversharing

5 minutes of reading / AI, Azure, Git, GitHub, Microsoft, open source, penetration testing, Tech / By Comkex

Microsoft has learned an important lesson after having to clean up a major data leak resulting from an “overly permissive” shared access signature (SAS) token accidentally disclosed by one of its employees. The incident took place in June 2023, when a Microsoft researcher shared a URL for an Azure Blob store in a public GitHub repository…

38TB Microsoft data leak highlights risks of oversharing Read More »

Sep 13 2023

GitHub fixes race condition that could have led to ‘repojacking’

3 minutes of reading / API, Git, GitHub, open source, Tech / By Comkex

GitHub has fixed a race condition vulnerability in its repository creation and user renaming operations that could have enabled threat actors to perform what is known as a repojacking attack. Discovered and disclosed by researchers from Checkmarx, had the flaw been exploited, it could have been used to take control of code repositories and hijack…

GitHub fixes race condition that could have led to ‘repojacking’ Read More »

Sep 13 2023

ExtraHop open sources 16 million rows of threat domain data

3 minutes of reading / Cloud, data science, DNS, Git, GitHub, machine learning, open source, Tech / By Comkex

Cloud-native network detection and response (NDR) specialist ExtraHop hopes to give security researchers and defenders a little extra help when it comes to defending against malware and botnet operations, by making its entire 16 million row domain generated by algorithm (DGA) dataset publicly available on GitHub. So-called DGAs are programs that use algorithmic generation to…

ExtraHop open sources 16 million rows of threat domain data Read More »