github security

Anthropic’s Claude Mythos 5 used fake online identities in an attempt to persuade a real open-source maintainer to approve malicious code during a UK AI Security Institute cyber evaluation, and then edited earlier activity after the pull request was challenged. The attempt failed because a human...

On June 5, 2026, GitHub disabled 73 Microsoft-owned repositories across Azure, Azure-Samples, Microsoft, and MicrosoftDocs after researchers found Miasma malware planted in projects that could steal developer credentials when opened in AI-assisted coding tools and modern IDEs. The breach was not...

GitHub disabled 73 Microsoft-owned repositories on June 5, 2026, after the Miasma worm reportedly reached Azure’s durabletask project through a compromised contributor account and planted credential-stealing payloads designed to run inside developer tools and AI coding agents. The incident...

Microsoft and GitHub have temporarily disabled at least 70 Microsoft-linked open-source repositories after researchers reported that attackers planted credential-stealing malware in projects tied to Azure, Durable Task, Azure Functions, and AI developer workflows, with the latest public...

Microsoft temporarily disabled more than 70 GitHub repositories in early June 2026 after researchers tied malicious commits to the Miasma self-replicating supply-chain campaign, then began restoring reviewed projects while continuing to investigate affected Azure, Azure-Samples, Microsoft, and...

On June 5, 2026, GitHub disabled 73 Microsoft-related repositories across Azure, Microsoft, and Azure Samples organizations after the Miasma worm campaign allegedly used a compromised contributor account to plant credential-stealing payloads aimed at AI coding tools. The incident is not merely...

On June 5, 2026, GitHub disabled 73 repositories across Microsoft’s Azure, Microsoft, Azure-Samples, and MicrosoftDocs organizations after a malicious commit was pushed to Azure/durabletask through a reportedly compromised contributor account. The immediate blast radius was not Windows Update or...

GitHub’s secret scanning now includes built‑in validators for MongoDB, Meta (Facebook), and multiple Microsoft Azure token types, expanding the service’s ability to tell you not just that a secret was leaked but whether that secret is still usable — a capability that meaningfully changes how...

Gitk, a popular graphical repository browser bundled with Git, has long served developers as an intuitive and powerful way to inspect version history, review changes, and visualize branching workflows. However, in recent months, a significant vulnerability—CVE-2025-27614—has been disclosed...

Here’s a summary of how HSL Helsinki Region Transport improved its code security and services using GitHub Advanced Security for Azure DevOps, according to the Microsoft customer story: Background: HSL runs regional transport in the Helsinki area, responsible for about 60% of Finland's public...

A recent report by CTech has sent shockwaves through the development community: an alarming vulnerability in Microsoft Copilot appears to have exposed thousands of private GitHub repositories. This revelation has major implications for developers, enterprises, and anyone relying on the secure...