Cyber Security GitHub opens security advisory comments to REST API workflows GitHub's public preview lets security teams read and write repository advisory comments through the REST API. CyberOGZ Team Oct 05, 2026 55 views
Software GitHub adds repository level runner controls for Dependabot updates GitHub now lets private and internal repositories set custom Dependabot runners for version and security updates. CyberOGZ Team Sep 30, 2026 120 views
Cyber Security GitHub Actions adds execution protections and a default pull_request_target block GitHub Actions adds execution protections and a Nov. 2 default block for pull_request_target in affected public repos. CyberOGZ Team Sep 19, 2026 607 views
Cyber Security CISA flags actively exploited JetBrains TeamCity flaw after critical RCE patch CISA added CVE-2026-63077, a critical JetBrains TeamCity On-Premises RCE flaw, to its exploited vulnerabilities catalog. CyberOGZ Team Aug 06, 2026 169 views
Cyber Security GitHub adds publish-time malware scanning and dual-use metadata rules for npm packages GitHub says npm packages will now face malware scanning before install availability, with new disclosure rules for dual-... CyberOGZ Team Jul 29, 2026 204 views
Cyber Security GitHub Actions now pauses some suspicious public-repo workflows for human approval GitHub Actions now automatically holds some suspicious public-repository workflow runs for collaborator approval before ... CyberOGZ Team Jul 28, 2026 192 views
Cyber Security GitHub adds a default three-day cooldown to Dependabot version updates GitHub now delays Dependabot version update pull requests by three days to reduce fast-moving software supply chain risk... CyberOGZ Team Jul 24, 2026 210 views
Cyber Security Microsoft frames Black Hat 2026 security agenda around AI and software supply chain trust Microsoft's Black Hat USA 2026 agenda focuses on AI agents, npm supply chain attacks, identity and trusted workflow abus... CyberOGZ Team Jul 19, 2026 151 views
Cyber Security AsyncAPI npm package compromise shows provenance is not a complete supply-chain defense Microsoft, Datadog and StepSecurity detail a July 14 AsyncAPI npm compromise that used legitimate CI releases to ship ma... CyberOGZ Team Jul 16, 2026 154 views
Cyber Security GitHub gives Dependabot version updates a three-day default package cooldown GitHub now delays Dependabot version update PRs by three days by default, while security fixes still open immediately. CyberOGZ Team Jul 15, 2026 205 views
Cyber Security IBM and Red Hat launch Lightwell to automate open source vulnerability remediation IBM and Red Hat launched Lightwell, an AI-assisted service for remediated, signed open source dependencies. CyberOGZ Team Jul 09, 2026 160 views
