GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from up passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can block a push before a credential enters repository history. How the detector works Existing checks recognize many credentials by their formats. The new classifier examines surrounding code to identify unstructured secrets, such as database passwords with … More
The post GitHub adds AI to catch passwords before a code push appeared first on Help Net Security.
source & further reading
helpnetsecurity.com — original article
Java library vulnerabilities: IBM and Red Hat fix 400+ previously unknown flaws
Gremlin Foresight AI finds system weaknesses and verifies the fixes
Imply Lumi connects SIEM tools and AI agents to more security data