Microsoft disables over 70 GitHub repos after hackers compromised them with dangerous malware
Threat actor reused unrotated GitHub Actions secrets to compromise 73 Microsoft repos Miasma worm planted across Azure, microsoft, Azure‑Samples, and MicrosoftDocs orgs Microsoft pulled affected repos, notified impacted…
Read more
Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing
Red Hat npm packages compromised with Mini Shai-Hulud variant Attackers target GitHub secrets and cloud credentials Copycat worm shows themed but similar tradecraft Numerous Red Hat npm packages were recently…
Read more
'This is horrific': GitHub kills Copilot pull-request ads after user backlash
More than 11,000 GitHub pull requests had ads inserted by Copilot Developers were unhappy about the way they were being implemented GitHub has confirmed this was a mistake, and it has no plans to advertise like this…
Read more
Bad news skeptics - GitHub says it will employ user data to train its AI after all
GitHub rolls out on-by-default AI user data training, with optional opt-out Business, Enterprise and some other platforms are excluded from the change The company explains that users' real-time, live data is crucial for…
Read more
Over 29 million secrets were leaked on GitHub in 2025, and AI really isn't helping
GitGuardian report warns AI-driven coding leaks secrets at record pace 2025 saw 29M exposed credentials on GitHub, +34% YoY jump AI-assisted commits double baseline leak rates, with MCP configs fueling exposures…
Read more
GitHub integrates Claude and Codex AI coding agents directly into GitHub
GitHub confirms Claude and Codex agents are now available to GitHub Pro+/Enterprise users Workers can collaborate by leaving @comments with agents just like human colleagues Google, Cognition and xAI agents also coming…
Read more