Nearly 300 GitHub repos pose as legit software to push malware

A threat actor has published hundreds of fake GitHub repositories impersonating legitimate software and security projects to ...

Microsoft Study Finds AI Coding Agents Lift Pull Requests by 24%

Microsoft researchers found AI coding-agent adopters merged 24% more pull requests, but gains depended on sustained use and ...
SecurityWeek

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.

'Ghostcommit' hides prompt injection in images to fool AI agents, steal secrets

A PNG hiding a prompt injection could steal your repo's secrets, researchers demonstrate. The technique, dubbed 'Ghostcommit, ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
HealthcareInfoSecurity

AI Coding Tools Can Fake Approval Prompts

A decades-old Unix symlink trick fools six AI coding assistants, including Claude Code, into writing SSH keys and shell ...
Tech Times

GitHub Closes the Agentic Loop in VS Code: Browser Tools Go GA, Sessions Run in Parallel

GitHub Copilot VS Code browser tools are now generally available and enabled by default for all paid Copilot subscribers. The ...