GitHub offers post-mortem on recent security breach

29-Apr-22

A security compromise at GitHub has been disclosed, allowing an unknown attacker to take data from dozens of private code repositories.

The attacker used stolen OAuth user tokens supplied to two third-party OAuth integrators � Heroku and Travis-CI � to authenticate to the GitHub API. Read More…