Red Hat GitLab Breach: The Crimson Collective's Attack
A comprehensive analysis of the breach that exposed 570GB of consulting data and put 800 organizations at risk.
Security | Threat Detection | Cyberattacks | DevSecOps | Compliance
The Latest Cybersecurity News & Insights From Around The World
Security Lessons For All From GitHub's Hardened Package Publication For npm
GitHub is hardening npm publishing rules but the underlying lessons can be applied by all developers: WebAuthn for writes, OIDC, and short-lived least-privilege credentials.
How to Use NHI Governance as Your Central Dashboard to Monitor AWS IAM
Let's have a look at how to integrate NHI Governance with AWS IAM to get detailed security insights into your dashboard.
Interview with Alex Rich, the VP of Sales at GitGuardian
Learn about our NHI Governance capabilities providing complete asset visibility, OWASP Top 10 compliance, and how we're tackling AI challenges where coding agents replicate exposed secrets at scale.
Shai-Hulud attack: 800 private repositories went public
Our security researcher Gaetan Ferry shared his take on the recent supply chain attacks with Mackenzie Jackson @TheSecureDisclosure.
OWASP AppSecDays France 2025: Learning To Defend The Global Supply Chain Together
OWASP AppSecDays France 2025 explored supply chain trust, CI/CD as the new perimeter and passkeys, showing how shared guardrails make secure delivery possible.
GitGuardian Introduces One-Click Secret Revocation to Accelerate Incident Response
Secure your secrets with GitGuardian's new one-click revocation. Instantly neutralize exposed secrets to close the attack window and automate your incident response.
Prioritizing Your GitGuardian Incidents
In this video, you will learn how to cut through the noise and prioritize your GitGuardian incidents with confidence. From understanding incident fields to using filters, views, and severity scoring, this walkthrough shows you exactly how to focus on what matters most. Take control of your backlog and streamline remediation to strengthen your team’s security posture. Chapters.
Who Governs Your NHIs? The Challenge of Defining Ownership in Modern Enterprise IT
Learn how to shift the conversation from "who’s to blame" to "who has context" in managing non-human identities across modern enterprise IT infrastructure.
Detect Secrets in GitLab CI Logs using ggshield and Bring Your Own Source
Discover how to automatically detect secrets in GitLab CI logs using ggshield and GitGuardian's Bring Your Own Source initiative. Learn to set up real-time scanning to prevent credential leaks, enhance compliance, and secure your entire CI/CD pipeline from hidden risks.