Github Office News Today

Okta maintains its service is operational and secure and that customers need not take any action.

Along with the announcement of the free secret scanning service, GitHub said that its Advanced Security customers can now protect their custom patterns.  

Checkmarx researchers say the vulnerability was fixed, but warns that the potential attack surface for such “hidden malicious code” may grow exponentially.

The company’s pen testing group jammed the new research and reconnaissance tools into SCMKit, an attack simulation toolkit unveiled at Black Hat.

GitHub says the industry must do better as only 16.5% of active GitHub developers use one or more forms of 2FA.

ForAllSecure is offering $1,000 for anyone to integrate its AI-powered fuzzer Mayhem into open-source projects — whether they are the project's maintainer or not.

Cycode research say they found dozens of vulnerabilities misconfigured in GitHub Actions workflows, which could impact millions of users.