Millions of GitHub repos likely vulnerable to RepoJacking, researchers say(bleepingcomputer.com)

118 points by pyeri 3 years ago | 46 comments

Red Hat confirms security incident after hackers breach GitLab instance(bleepingcomputer.com)

208 points by speckx 1 year ago | 50 comments

Dev rejects CVE severity, makes his GitHub repo read-only(bleepingcomputer.com)

56 points by rntn 2 years ago | 45 comments

Malicious VSCode extensions with installs discovered(bleepingcomputer.com)

29 points by leeny 2 years ago | 3 comments

Malware infiltrates Pidgin messenger's official plugin repository(bleepingcomputer.com)

150 points by mikece 2 years ago | 20 comments

New Linux udisks flaw lets attackers get root on major Linux distros(bleepingcomputer.com)

336 points by smig0 1 year ago | 227 comments

BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.

GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)

215 points by hermitcrab 1 month ago | 89 comments

A Successful Software blog post complaining that GitHub has not removed malicious software imitating the author's product three weeks after it was reported.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

GitHub appears to be struggling with measly three nines availability(theregister.com)

423 points by richtr 7 months ago | 221 comments

The Register article on GitHub's recent string of outages and slowdowns affecting Actions, pull requests, notifications and Copilot, falling short of three nines.

GitHub cuts AI deals with Google, Anthropic(bloomberg.com)

853 points by jbredeche 2 years ago | 658 comments

Bloomberg article reporting that GitHub Copilot will offer AI models from Google and Anthropic as alternatives to OpenAI's models.

GitHub RCE Vulnerability: CVE-2026-3854 Breakdown(wiz.io)

424 points by bo0tzz 6 months ago | 89 comments

Wiz Research blog post detailing CVE-2026-3854, a critical flaw in GitHub's internal git infrastructure enabling remote code execution on GitHub.com and GitHub Enterprise Server.

Immich 3.0(github.com)

553 points by hashier 3 months ago | 268 comments

GitHub Discussions announcement of Immich v3.0.0, a major release of the self-hosted photo and video management app, including breaking changes.