Microsoft is adding AWS capacity to GitHub after AI-driven growth strained infrastructure and triggered a series of ...

VS Code flaw exposes GitHub OAuth tokens via one-click attack on GitHub.dev, enabling private repo access and token theft.

Microsoft shut down dozens of GitHub code repositories for Azure and AI coding tools after a reported hack.

Researchers say prompt injection attacks could manipulate AI coding agents to access sensitive credentials stored in software ...

GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask Python ...

GitHub Copilot security scanning arrives in the terminal with /security-review, an experimental pre-commit slash command that ...

The code hosting giant GitHub said it was investigating a breach, but said there was no evidence of customer data theft.

A flaw in Anthropic’s Claude Code GitHub Action allowed a malicious GitHub issue from a bot actor to trigger workflows and ...

A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...

A researcher has disclosed details of a severe VS Code vulnerability that can be exploited to steal GitHub tokens and access ...

A flaw in Claude Code's GitHub Action let attackers bypass permission checks via fake bots and steal OIDC tokens through prompt injection.

The Miasma credential-stealing attack framework, which has recently targeted open-source ecosystems through supply-chain ...