Restructuring GitHub's bug bounty program(github.blog)

47 points by soheilpro 3 months ago | 22 comments

How GitHub gave every repository a durable owner(github.blog)

76 points by ascertain 3 months ago | 25 comments

Auf Wiedersehen, GitHub – CEO Steps Down(github.blog)

115 points by ben_hall 1 year ago | 60 comments

Yocto, RockPi and SBOMs: Building modern embedded Linux images(vpetersson.com)

137 points by mvip 1 year ago | 91 comments

Highlights from Git 2.54(github.blog)

127 points by ingve 6 months ago | 71 comments

An update on GitHub availability(github.blog)

394 points by salkahfi 6 months ago | 236 comments

A GitHub blog post explaining what the company has done and is still doing to improve the availability and reliability of its service.

GitHub MCP exploited: Accessing private repositories via MCP(invariantlabs.ai)

477 points by andy99 1 year ago | 287 comments

Invariant Labs blog post describing a vulnerability in the official GitHub MCP server that lets attackers access private repository data via AI agent prompt injection.

We used an AI agent to fix an open-source bug. Someone asked to ban us(github.com)

9 points by maxcr 1 month ago | 2 comments

A GitHub pull request to the VisiData project submitted using an AI agent to fix a bug, which drew a request to ban the contributors.

GitHub is investigating unauthorized access to their internal repositories(twitter.com)

527 points by splenditer 5 months ago | 289 comments

A post on X from GitHub stating it is investigating unauthorized access to its internal repositories, with no current evidence of impact to customer data.

Getting AI to work in complex codebases(github.com)

442 points by dhorthy 1 year ago | 368 comments

A GitHub markdown document from HumanLayer describing advanced context engineering techniques for getting AI coding agents to work in complex codebases.

AI agent opens a PR write a blogpost to shames the maintainer who closes it(github.com)

747 points by wrxd 8 months ago | 581 comments

A closed GitHub pull request to matplotlib by user crabby-rathbun proposing to replace np.column_stack with np.vstack().T for performance.

New Nginx Exploit(github.com)

427 points by hetsaraiya 5 months ago | 97 comments

GitHub repository containing a proof-of-concept exploit for Nginx vulnerability CVE-2026-42945, called Nginx-Rift.