SecurityWeek

Ghost Accounts Abuse GitHub API in Mass Recon Campaign

Multiple threat actors are abusing the GitHub API to discover organizations’ repositories and members via ghost accounts.
SecurityWeek

Network of 200 GitHub Repositories Used for Malware Infection

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

The GitHub Actions Attack Pattern Your CI Security Scanners Miss

ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't ...
HackerNoon

4,900 Stars in One Week: This Repo Went Viral by Unpacking the Hidden Instructions Behind AI Models

Explore the GitHub repository exposing leaked system prompts from ChatGPT, Claude, Gemini, Cursor, and more—and what they ...
InfoWorld

Write cleaner and faster Python code

Check out Python’s powerful new linters and profiling tools, and learn how virtual environments can save you time and trouble. Meta’s long-awaited Pyrefly linter is out in a 1.0 version, and the ...
Entrepreneur

The Man Behind Anthropic’s Claude Code Hasn’t Written a Line of Code in 8 Months — Here’s What He Does Instead

Boris Cherny is the creator of Anthropic’s Claude Code tool, which writes code on behalf of developers based on a text prompt. Cherny hasn’t handwritten code in eight months; instead, he manages ...
Digital Trends

NotebookLM can now write code, build spreadsheets, and find sources for you

Google has upgraded NotebookLM with a new reasoning engine, expanded file output options, and a more flexible research workflow, giving the AI notebook tool a broader set of capabilities for handling ...
The Next Web

Anthropic says Claude writes 80% of its own code and the world needs a plan to hit the brakes

Anthropic reveals that Claude now writes over 80% of its production code, with engineers shipping 8x more code per quarter than in 2024. The company’s new Anthropic Institute paper maps the path to ...
The Next Web

A single GitHub issue could have hijacked Anthropic’s own Claude Code action and poisoned every project that uses it

A flaw in Anthropic’s Claude Code GitHub Action let attackers bypass permission checks via a fake bot account and use prompt injection to steal OIDC tokens, gaining write access to any vulnerable ...
Bleeping Computer

VS Code zero-day lets hackers steal GitHub tokens in one click

A security researcher has released exploit code for a Visual Studio Code (VS Code) zero-day vulnerability that allows attackers to steal GitHub authentication tokens by tricking users into clicking a ...
techtimes

GitHub Copilot Replaces GPT-4 With Project Polaris, Ships Multi-Agent VS Code at Build

An audience member seated near a Microsoft logo listens as Microsoft Chairman and Chief Executive Officer Satya Nadella speaks during the Microsoft Build conference opening keynote in Seattle, ...
The Atlantic

The Biggest Tell That Something Was Written by AI

A few weeks ago, where I live in Johannesburg, a man ran a stop sign and crashed into my Subaru. At the scene he was frantic, unable to gather his thoughts. Half an hour later, I received a lengthy, ...