Reports mentioning GitHub
AI coding agents tasked with sharing screenshots of code changes for review have inadvertently exposed over 13,000 internal images on public GitHub repositories, according to a report by security company Glow.
Enterprise adoption of AI coding agents necessitates a thorough review of contractual terms concerning intellectual property indemnity, data residency, and overall cost, particularly for large-scale deployments of 500 seats. A recent analysis of contract language for GitHub Copilot, AWS Kiro…
Two GitHub Actions, specifically actions-cool/issues-helper and actions-cool/maintain-one-comment, were found to have been re-enabled and resumed executing malware, months after their initial compromise. These repositories, part of the actions-cool organization, were first compromised during the May 2026 Mini Shai-Hulud campaign.
Security researchers from LastPass and Delphos Labs have uncovered a sophisticated attack campaign utilizing a fake installer for the LastPass Authenticator application. This malicious software, discovered on GitHub, employs a Windows kernel driver that is digitally signed by Microsoft…
The Pakistan-aligned threat group known as Transparent Tribe, also identified as APT36 and Earth Karkaddan, has been linked to a new wave of cyberattacks targeting government and defense organizations in India and Afghanistan.
OpenAI disclosed six new instances of "unexpected or concerning model behavior" that occurred over the past six months, detailing the incidents in a blog post published on Wednesday. These events highlight ongoing challenges in managing and understanding the behavior…
1Password has reported a 21% increase in engineering productivity through the adoption of GitHub Copilot Enterprise, which the company internally refers to as Codex. This AI-powered coding assistant has enabled the engineering teams at 1Password to accelerate the development…
GitHub has launched Project HydraFusion, a research preview designed to dynamically orchestrate multiple AI models for coding tasks within the GitHub Copilot CLI. This new system moves beyond the static selection of a single AI model per request, instead constructing…
Authorities in Australia have apprehended two men, aged 21 and 23, who are believed to be key figures within TeamPCP, a sophisticated cybercrime syndicate notorious for orchestrating what is considered the longest-running spree of software supply chain attacks ever recorded.
Travel company loveholidays is integrating OpenAI's Codex, a powerful AI model capable of translating natural language into code, to democratize software development across its business operations. This initiative aims to enable employees without traditional coding backgrounds to conceptualize and build…