Skip to content
Threat Feed

Product

GitHub Enterprise

4 briefs RSS
medium advisory

GitHub Enterprise Audit Log Streaming Paused

Detection of a user pausing audit log event streaming in GitHub Enterprise, potentially indicating an attempt to evade detection by disabling the audit trail.

GitHub Enterprise +3 github audit-log defense-evasion
2r 2t
medium advisory

GitHub Enterprise IP Allow List Disabled

An IP allow list was disabled in GitHub Enterprise, potentially allowing unauthorized access from untrusted networks and exposing sensitive code repositories.

GitHub Enterprise +3 github cloud ip-allow-list bypass security-control anomaly
2r 1t
high advisory

GitHub Enterprise 2FA Requirement Disabled

The disabling of two-factor authentication (2FA) in GitHub Enterprise, detected via audit logs, weakens account security and increases the risk of account takeover and supply chain compromise.

GitHub Enterprise +3 github 2fa defense-evasion
2r 1t
medium advisory

GitHub Enterprise Classic Branch Protection Rule Disabled

Detection of disabled classic branch protection rules in GitHub Enterprise, indicating potential bypass of code review and security controls, leading to unauthorized code changes and supply chain compromise.

GitHub Enterprise +4 github branch_protection supply_chain
3r 2t