Similar to This
Previous
Hackers hijacked 1,900 GitHub accounts. Then they went after 30,000 repos.: GhostAction hijacked about 1,900 GitHub accounts to plant credential-stealing Actions ...
thenewstack.io/hackers-hijacked-1900-github-accounts-then-they-went-after-30000-repos/

GitHub Actions was down yet again: Another outage puts last week's promises to an early test
theregister.com/devops/2026/08/26/github-actions-was-down-yet-again/5292679

'We let you down': GitHub pledges to scale up before developers give up: CTO promises architectural overhaul following second outage of the month
theregister.com/devops/2026/08/21/we-let-you-down-github-pledges-to-scale-up-before-developers-give-up/5291031

Microsoft confirms GitHub is down worldwide: GitHub is down for some users as a widespread outage is causing errors across the website, API, Actions ...
bleepingcomputer.com/news/microsoft/microsoft-confirms-github-is-down-worldwide/

An AI broke Snowflake's code. Then another AI agent exploited it: Don't worry, this one was via a bug bounty program
theregister.com/security/2026/08/17/an-ai-broke-snowflakes-code-then-another-ai-agent-exploited-it/5288666

GitHub - AtharvaMaik/donecheck: Proof-of-done for AI coding agents. Local evidence receipts for Codex, Claude Code, Cursor, and GitHub Actions.
github.com/AtharvaMaik/donecheck

Megalodon cyberattack infects 5,500 GitHub repositories, report says: Security researchers say 5,500 GitHub repositories have been affected by the attack.
mashable.com/tech/megalodon-cyberattack-github-repositories-malware

Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650

Agents hooked into GitHub can steal creds – but Anthropic, Google, and Microsoft haven't warned users
theregister.com/2026/04/15/claude_gemini_copilot_agents_hijacked/

How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/

How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/

Trivy vulnerability scanner breach pushed infostealer via GitHub Actions: The Trivy vulnerability scanner was compromised in a supply-chain attack by threat ...
bleepingcomputer.com/news/security/trivy-vulnerability-scanner-breach-pushed-infostealer-via-github-actions/

GitHub’s Agentic Workflows bring “continuous AI” into the CI/CD loop: GitHub Next: Agentic Workflows automate repo toil with continuous AI. Use English prompts ...
thenewstack.io/github-agentic-workflows-overview/

Zig quits GitHub, says Microsoft's AI obsession has ruined the service: : Zig prez complains about 'vibe-scheduling' after safe sleep bug goes ...
theregister.com/2025/12/02/zig_quits_github_microsoft_ai_obsession/

Next
