Former GitHub CEO’s startup Entire unveils its answer to the crush of AI coding agents

Former GitHub CEO Thomas Dohmke's startup Entire is rolling out a distributed network for mirroring code repositories, making ...
The Hacker News

GitHub 'Verified' Commits Can Be Rewritten Into New Hashes Without Breaking Signatures

Research shows signed Git commits can be re-encoded into fresh GitHub Verified hashes without changing files or breaking ...
CSO Online

GitHub AI agent leaks private repositories via prompt injection attack

A prompt injection attack can trick GitHub’s preview Agentic Workflows into retrieving content from private repositories and ...
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.
The Next Web

‘GitLost’: researchers tricked GitHub’s AI agent into leaking private repos

Noma Labs tricked GitHub's AI agent into leaking private repositories with a crafted issue. The prompt-injection flaw, GitLost, has no code fix.

GitHub AI agent leaks private repos when asked nicely

Malicious prompters could easily trick GitHub agents into pulling data from private repositories and then leaking the ...
The Hacker News

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data

The issue affects GitHub Agentic Workflows setups that read public input, hold private repo access, and can post output ...
Bleeping Computer

GitHub fixes RCE flaw that gave access to millions of private repos

In early March, GitHub patched a critical remote code execution vulnerability (CVE-2026-3854) that could have allowed attackers to access millions of private repositories. The flaw was reported on ...