UPDATED
SecurityWeek · · Critical severity
Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The post Critical Vulnerability Exposes GitHub Agentic Workflows to...
Hacker News ·
The Register ·
Other regions of Germany are starting to move away from proprietary tools and cloud services from the US in favor of FOSS. The state of Mecklenburg-Vorpommern, in the northeast of Germany, has confirmed it is on the road to digital...
Hacker News ·
Help Net Security ·
AI is changing how security teams find vulnerabilities, analyze code, test applications, and protect infrastructure. Developers are building tools to secure AI systems themselves, from coding agents and memory protection to model...
ETCIO ·
Zerodha CTO Kailash Nadh still introduces himself first as an engineer. That identity shapes everything: from hiring and infrastructure to open source and artificial intelligence.
TechRadar ·
Efosa has been writing about technology for over 7 years, initially driven by curiosity but now fueled by a strong passion for the field. He holds both a Master's and a PhD in sciences, which provided him with a solid foundation in...
AI coding token costs are on track to rival human payroll | InfoWorld ·
Microsoft has fitted the June 2026 update to Visual Studio IDE with a GitHub Copilot usage window that gives a clearer view of where a user stands against the GitHub’s new usage-based model. The update also adds trust validation for...
The Register ·
Malicious prompters could easily trick GitHub agents into pulling data from private repositories and then leaking the information as a public comment for anyone to access, according to Noma Labs researchers who named the vulnerability...
TechCrunch ·
Open-source models’ success isn’t coming at the expense of frontier labs. Instead, they each seem to capture two phases of the same life-cycle.
Hacker News ·
Hacker News ·
Hacker News ·
darkreading ·
The flaw allows an unauthenticated attacker to craft a GitHub Issue in an org's public repository and then silently pull data from its private repos, too.
The Hacker News · · High severity
A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization's private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public...
BleepingComputer ·
ActiveState explains how GitHub Actions attack chains can evade traditional CI security scanners, why passing a scan doesn't guarantee a secure pipeline, and how organizations can better govern their CI/CD workflows.
SiliconANGLE ·
Researchers at artificial intelligence security company Noma Security Inc. today disclosed a critical prompt injection vulnerability in GitHub Inc.’s new Agentic Workflows feature that allowed an unauthenticated attacker to siphon data...
HackRead ·
Noma Labs details GitLost, a prompt injection flaw that made GitHub's AI agent expose private repo data through a crafted public issue and guardrail failures.
CIO Africa ·
Kaspersky’s Global Research and Analysis Team (GReAT) has identified widespread security misconfigurations in GitHub Actions workflows after analysing more than...
Slashdot ·
GitHub is offering a limited run of 1,000 CD-ROM copies of public repositories as a pro-physical-media jab at Sony's plan to stop producing PlayStation game discs in 2028. Tom's Hardware reports: The coding and collaboration platform,...
Help Net Security · · Medium severity
Developers on Apple silicon Macs have run Linux containers through software built around a single shared virtual machine for years. Apple’s open-source Container project gives each Linux workload its own lightweight virtual machine....
Hackaday ·
The Intel 80386 is a rather fascinating slice of computer history. It marked the first 32 bit X86 processor, and was a staple of early desktop computing. Like all chips, it has a number of quirks, one of which being the fact that all...
The Register ·
Monday was the last day to score your own free CD of your GitHub repository, which the Microsoft-owned subsidiary offered to mail to the first 1,000 people who asked. But as of noon eastern time, that offer has been withdrawn (if it was...
Hackaday ·
Cheap vehicles are thin on the ground in 2026, but [Andy Didorosi] thinks he has the answer for low-speed applications with an open source kei truck . Still in the early design phase, [Didorosi] has an old factory in Detroit that has...
Phoronix ·
Earlier this year AMD announced the Ryzen AI Halo as their in-house mini PC offering built around their leading Ryzen AI Max+ "Strix Halo" platform. After pre-orders began last month, the Ryzen AI Halo is officially beginning to ship...
Ubuntu blog ·
In the traditional automotive world, teams often work in silos: the cybersecurity experts lock down the ports, the quality assurance teams hunt for bugs, and the functional safety engineers track the ISO 26262 compliance. At Canonical,...
Ubuntu blog ·
Canonical is pleased to share its latest research report , “The open source chain of trust.” Based on a survey of 500 DevOps professionals, the report highlights how organizations approach their open source software supply chains. While...
Android Authority ·
Credit: Joe Maring / Android Authority TL;DR YTubic is a new, free, open-source YouTube Music desktop client for Windows 10 and 11 designed to replace slow, webview-based alternatives. The app communicates directly with YouTube’s...
SecurityWeek · · Critical severity
The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers. The post North Korean Hackers Target Open Source Developers in Supply...
GitHub Engineering Blog ·
In my spare time I enjoy building Gundam models, which are model kits to build iconic mechas from the Gundam universe. You might be wondering what this has to do with software engineering. Product engineers can be seen as the engineers...
GitHub Engineering Blog ·
Today, we’re announcing some changes that will improve the security of accessing Git data over SSH. We’re adding a new post-quantum secure SSH key exchange algorithm, known alternately as sntrup761x25519-sha512 and...
GitHub Engineering Blog · · Medium severity
Most people think ASCII art is simple, and a nostalgic remnant of the early internet. But when the GitHub Copilot CLI team asked for a small entrance banner for the new command-line experience, they discovered the opposite: An ASCII...
GitHub Engineering Blog ·
So much of what you interact with on GitHub depends on search—obviously the search bars and filtering experiences like the GitHub Issues page, but it is also the core of the releases page, projects page, the counts for issues and pull...
GitHub Engineering Blog ·
For years, accessibility feedback at GitHub didn’t have a clear place to go. Unlike typical product feedback, accessibility issues don’t belong to any single team—they cut across the entire ecosystem. For example, a screen reader user...
GitHub Engineering Blog · · Medium severity
Did you know that, at GitHub, we host all of our own source code on github.com ? We do this because we’re our own biggest customer—testing out changes internally before they go to users. However, there’s one downside: If github.com were...
GitHub Engineering Blog · · Medium severity
When you’re working through a backlog—opening an issue, jumping to a linked thread, then back to the list—latency isn’t just a metric. Even small delays add up, and they hit hardest at the exact moments developers are trying to stay in...
Help Net Security ·
Plenty of developers now keep several coding agents close at hand, reaching for Claude Code on one task and Codex or Cursor on the next. Each tool arrives with its own command line, its own handling of credentials, and its own way of...
Hacker News ·
Phoronix ·
One month ago it was exciting to see the open-source ReactOS operating system running Valve's Half-Life game. Little to realize less than 30 days later it would also be running Half-Life 2...
Hackaday ·
Optical media is great — it’s pretty high density, relatively durable, and decently long-lasting if “That’ll buff out” is very often true when it comes to disks. If not well cared for, well, it’s only relatively durable, and we’ve...
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free